Las Vegas hotels have a clear duty to be more vigilant about their security procedures, but the folks at the most recent DEF CON gathering were perhaps not the best-chosen group to try out a new “swaggering bully-boys security enforcement” policy:
In the wake of the mass shooting in Las Vegas in October of 2017, hotels in the city started drafting more aggressive policies regarding security. Just as Caesars Entertainment was rolling out its new security policies, the company ran head on into DEF CON — an event with privacy tightly linked to its culture.
The resulting clash of worlds — especially at Caesars Palace, the hotel where much of DEF CON was held — left some attendees feeling violated, harassed, or abused, and that exploded onto Twitter this past weekend.
Caesars began rolling out a new security policy in February that mandated room searches when staff had not had access to rooms for over 24 hours. Caesars has been mostly tolerant of the idiosyncratic behavior of the DEF CON community, but it’s not clear that the company prepared security staff for dealing with the sorts of things they would find in the rooms of DEF CON attendees. Soldering irons and other gear were seized, and some attendees reported being intimidated by security staff.
And since the searches came without any warning other than a knock, they led, in some cases, to frightening encounters for attendees who were in those rooms. Katie Moussouris — a bug bounty and vulnerability disclosure program pioneer at Microsoft, an advocate for security researchers, and now the founder and CEO of Luta Security — was confronted by two male members of hotel security as she returned to her room. When she went into the room to call the desk to verify who they were, they banged on the door and screamed at her to immediately open it.
Current status: two members of hotel security banging on my door after I asked to go into my room and verify them with hotel security. I'm on speaker phone with hotel security, asking for a supervisor to come verify. I'm terrified. What the hell is this @CaesarsPalace #DEFCON
— Katie Moussouris (@k8em0) August 11, 2018
In another case, a hotel employee—likely hotel security—entered the room of a woman attending DEF CON without knocking:
This evening, a man in a light blue collared shirt with a walkie talkie, entered my room with a key without knocking while I was getting dressed. He left when I started screaming. @CaesarsPalace is investigating whether it was a hotel employee. @defcon has also been alerted.
— Maddie Stone (@maddiestone) August 12, 2018
