BSides Canberra 2026

KEYNOTE: Thai Duong & Bruce Dang

Thai Duong was born in Saigon and grew up on the Internet. He spent most of his adult life breaking things for a living. He was at Google, where he worked on security and cryptography, helping create tools such as Google Tink and Project Wycheproof. Before that, he helped discover the SSL attack trilogy: BEAST, CRIME, and POODLE. Together with Juliano Rizzo, he won a Pwnie Award for Best Server-Side Bug in 2011. These days, he's part of Calif, a security research firm specializing in AI security. His official title is CEO, which makes him the least competent person in the company.

Bruce Dang is a failed recluse who has been dabbling with computers for a few years. He started his security career in the primordial days of the Microsoft Security Response Center (MSRC) when it averaged three or 4 Windows bugs per month. Along the way, he analyzed Stuxnet and wrote a popular children's book called Practical Reverse Engineering with some friends. After realizing the impermanence of Windows, he seeked out the elders at Apple and was re-educated in computer security. As a novice mendicant at Apple, he learned the real challenges of privacy, security, and debugging without attachment or anger. His single-minded pursuit was interrupted by the iconoclasts at Calif.io; they convinced him that AI is the only true path to enlightenment. Since then, he has been studying the endless sacred scriptures of Claude. He has not reached AGI.

Thai Duong

Thai Duong was born in Saigon and grew up on the Internet. He spent most of his adult life breaking things for a living. He was at Google, where he worked on security and cryptography, helping create tools such as Google Tink and Project Wycheproof. Before that, he helped discover the SSL attack trilogy: BEAST, CRIME, and POODLE. Together with Juliano Rizzo, he won a Pwnie Award for Best Server-Side Bug in 2011. These days, he's part of Calif, a security research firm specializing in AI security. His official title is CEO, which makes him the least competent person in the company.

Bruce Dang

Bruce Dang is a failed recluse who has been dabbling with computers for a few years. He started his security career in the primordial days of the Microsoft Security Response Center (MSRC) when it averaged three or 4 Windows bugs per month. Along the way, he analyzed Stuxnet and wrote a popular children's book called Practical Reverse Engineering with some friends. After realizing the impermanence of Windows, he seeked out the elders at Apple and was re-educated in computer security. As a novice mendicant at Apple, he learned the real challenges of privacy, security, and debugging without attachment or anger. His single-minded pursuit was interrupted by the iconoclasts at Calif.io; they convinced him that AI is the only true path to enlightenment. Since then, he has been studying the endless sacred scriptures of Claude. He has not reached AGI.