DEF CON 27 Social Engineering Village Notes

The Core Philosophy: Swing Away

Billy Boatright presents a powerful, action-oriented approach to conquering impostor syndrome by focusing on performance rather than perfection.

Life-Changing Quote: "If you're good enough to have a bat in your hands, you're good enough to swing it." - Babe Ruth (from a baseball card that changed Billy's life)

Impostor Phenomenon vs Syndrome:

First introduced in 1978 by doctors Pauline Clance and Suzanne Imes as "impostor phenomenon"
Experience of self-perceived intellectual phoniness and self-doubt
Triggered by events rather than being a constant mental state
Not classified as a mental disorder, though effects can mimic depression/anxiety
Nearly 70% of people experience symptoms according to research

"This talk isn't about how to handle impostor syndrome or deal with it - it's how to conquer it and eliminate it."

The Origin Story: Three Transformative Experiences

1989: Baseball Failure to Success

10-year-old Billy had a .000 batting average - afraid to swing
Baseball card with Babe Ruth quote: "If you're good enough to have a bat in your hands, you're good enough to swing it"
Transformed mindset: "I was put in a position to perform, so I might as well perform"
Used the 17-word mantra before every at-bat for the next decade
Sports perspective: Even at his best, successful only 40% of the time

2001: Flair Bartending Audition

Auditioning at Caesar's Palace against world champion Christian Delpesci
"His C-game beats my A-game" - vastly outmatched in skill
Mindset: "They called me for the audition, so I might as well perform"
Result: Got the job despite not being the best in the room
Key insight: They wanted an entire bar staff, not just one person

DEF CON 19: SEC CTF Competition

Still a bartender when selected for Social Engineering Capture the Flag
Applied the same mindset: "Chris selected me, so I might as well perform"
Admitted terrible strategy: tried to get every flag instead of playing strategically
Demonstrated that being selected means you're qualified to try
Proved that performance matters more than perfection

The Hero Worship Problem in Cybersecurity

Modern Challenge: "In the age of social media, we're given unprecedented access to people's lives. Because of this access, we think we know people better. This access is just an illusion because it's so controlled and filtered."

The Illusion of Social Media Access:

Controlled Narratives

Billy's surgery tweets show only the positive outcome ("still undefeated"), hiding the difficult recovery process

Filtered Reality

Social media presents curated highlights, not the full human experience with struggles and failures

Daniel Boorstin's Insight

1962 observation: "We lose sight of the men and women who do not simply seem great because they are famous but are famous because they are great."

Billy's "Social Engineering Top 7":

Role Models, Not Heroes

Chris Hadnagy, Rachel Tobac, Jayson Street, Michele Fincher, TrustedSec, Jack Rhysider, Jake Krebbs

Selection Criteria

Chosen for marketing, self-promotion, book sales, TV shows, podcasts, conference talks - professional achievements

Healthy Perspective

"Their successes drive me to be better. I understand their greatness was not bestowed - everything they've achieved they've earned."

Critical Distinction: "I'm not an impostor because I'm not as good as I think they are. I may never be able to walk through walls like Jayson Street or code like Jake Krebbs, but none of that will stop me from performing when it's my time to perform."

Practical Applications in Security Contexts

SEC CTF Subjectivity:

Variable Human Susceptibility

People's vulnerability to social engineering changes minute-to-minute based on circumstances and mental state

Success Redefined

Who's more successful: person getting 10 URL visits (high points) or hitting every flag? Both have value in different contexts

Real-World Impact

In actual security, getting one person to visit a URL could compromise an entire company - success isn't always about quantity

CFP (Call for Papers) Mindset:

Speaker Impostor Syndrome: "I'm speaking at DEF CON and I can't believe they picked me. I'm such a fraud." Response: "No you're not. You submitted a CFP, the committee was intrigued, they selected you."

"If you're good enough to be on that stage, you're good enough to give your talk. Period. End of story. They want you there."

Actionable Strategies to Conquer Impostor Syndrome

Swing Away Mentality

Apply Babe Ruth's wisdom: If you're in a position to perform, you're qualified to perform. Success rates don't define your right to try.

Avoid Hero Worship

Have role models and idols, but don't worship them. Let their success drive you to work harder without comparing yourself unfairly.

Get Involved

Billy's first DEF CONs were quiet. Find where your skills fit - villages, CTFs, volunteering, local BSides. Action beats hesitation.

External Power Sources

Use music (Billy's 4-song pre-talk playlist), motivational techniques, or quick pick-me-ups to override self-doubt in the moment.

Positive Initial Response

Let your first reaction to opportunities be to outperform feelings of self-doubt rather than succumb to them.

Take Classes & Build Community

Billy gained 25 lasting friendships from Chris Hadnagy's Black Hat class. Shared learning creates support networks.

Specific DEF CON Engagement Opportunities

Mission Impossible

Sign up for challenges that push your boundaries in a supportive environment

SEC CTF Participation

Apply when submissions open - selection means the organizers believe in your potential

Village Volunteering

Find your niche among the growing number of specialized villages at DEF CON

Local BSides Events

Start with smaller, local security conferences to build confidence and experience

Performance Over Perfection: "You might not always be successful, but you're good enough to perform. Sports taught me that even at my best, I was only successful 40% of the time. The real world is even more subjective - embrace the attempt."

Key Takeaways & Final Wisdom

Essential Mindset Shifts:

Selection equals qualification - if you're chosen for an opportunity, you deserve to be there
Performance matters more than perfection - taking action beats perfect inaction
Social media presents illusions - don't compare your reality to others' highlights
Have role models, not heroes - admire skills without worshipping people
Embrace subjective success - different contexts require different measures of achievement
Build external support systems - music, communities, and rituals that boost confidence

Core Message: "If you're good enough to be in a position to perform some task - speaking, teaching, writing, pen testing, podcasting, whatever your current task is - you're good enough to do it. You might not always be successful, but you're good enough to perform."

Billy's Pre-Talk Playlist (for external power):

Badge of Pride - Pennywise
The Warrior's Code - Dropkick Murphys
Tougher Than Leather - Run DMC
All Original - Bone Thugs-n-Harmony

"Let your initial response be to just outperform those feelings of self-doubt. Conquer impostor syndrome through action, not analysis."