<div dir="ltr"><div style="font-size:13px">I strongly agree with your general comments about dry-run throughs. I'm surprised no other security conference (that I know of) has borrowed the approach. </div><div style="font-size:13px"><br></div><span style="font-size:13px">One of the problems I have with Prezi is hinted at by your 1(b). Prezi doesn't lend itself to easy organization of thoughts in that it's up to you to provide all the structure. I often start with an outlining app first and then migrate to prezi when I use it, but that's not efficient. Also, the infinite zooming can certainly be useful, but I think it often ends up being distracting more often than clarifying. </span><div style="font-size:13px"><br></div><div style="font-size:13px">One alternative I like is reveal.js (<a href="https://github.com/hakimel/reveal.js/" target="_blank">https://github.com/hakimel/reveal.js/</a>).</div><div style="font-size:13px"><br></div><div style="font-size:13px">It allows easy hierarchical organization (in two-axes at least), and has other added bonuses like being plain text and therefore convenient for version control, viewable anywhere without proprietary software (heck, it works fine on mobile platforms even -- a good way to test your minimum font sizes). Oh -- I don't think I showed it off during our dry-run through, but you can also zoom out of the whole presentation when you want to quickly navigate to a particular slide and that's where the hierarchical structure is extra handy for quick navigation. Also, prezi doesn't do this: <a href="http://lab.hakim.se/reveal-js/#/10/4" target="_blank">http://lab.hakim.se/reveal-js/#/10/4</a></div><div style="font-size:13px"><div class="gmail_extra"><br></div><div class="gmail_extra">There's all sorts of generator scripts from structured markup like Markdown (<a href="https://github.com/webpro/reveal-md" target="_blank">https://github.com/webpro/reveal-md</a>) or org-mode (<a href="https://github.com/yjwen/org-reveal" target="_blank">https://github.com/yjwen/org-reveal</a>) that are even more convenient for simple editing of the initial slide content which helps for quick outlining, version control, etc. That helps a ton with the separation of presentation and content that Jacob referenced, but LaTeX can get annoying.</div><div class="gmail_extra"><br></div><div class="gmail_extra">There's also a few other .js based presentation frameworks that have similar capabilities to prezi if you're up for experimentation, like impress.js (<a href="http://bartaz.github.io/impress.js/#/bored" target="_blank">http://bartaz.github.io/impress.js/#/bored</a>), <a href="http://strut.io/" target="_blank">strut.io</a> (<a href="http://strut.io/" target="_blank">http://strut.io/</a>) which is an almost-wysiwyg like editor for a couple of these frameworks, though it's a bit buggy.</div><div class="gmail_extra"><br></div><div class="gmail_extra">-- </div><div class="gmail_extra">jordan</div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Apr 8, 2015 at 9:54 AM, Dave Aitel <span dir="ltr"><<a href="mailto:dave@immunityinc.com" target="_blank">dave@immunityinc.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">When hacking professionally, you model everything very carefully, run<br>
your tools and methodology against the systems, and then revisit<br>
multiple times as you optimize against your known defensive threats.<br>
That's just how professionals work. And I find it funny that INFILTRATE<br>
is the first conference in our sphere that requires a pre-conference<br>
WebEx dry run. I'm going to bullet-list a few things we see a lot just<br>
so everyone knows:<br>
<br>
1. Use Prezi. You don't HAVE to because I know it makes you feel like a<br>
hippie, but it also makes for better presentations. This is for three<br>
reasons:<br>
a. Zoom. Zoom. MORE ZOOM. Zoom is the most key feature in a<br>
presentation but so few people use it because in every other<br>
presentation software it is super impossible to do.<br>
b. Hierarchical presentations. PPT and Keynote take your nice<br>
pyramid-like thoughts which are connected naturally and then flatten<br>
them into a line of slides. You get a MUCH better presentation by being<br>
able to subtly show the true shape of your thoughts.<br>
c. It is much easier and faster to create a Prezi than a good PPT.<br>
This means more time thinking about what you are trying to represent and<br>
less time fixing how big the fonts are in slide 50.<br>
<br>
That doesn't mean there aren't downsides to Prezi. But overall it is a<br>
massive step forwards.<br>
<br>
2. Contrast in your text. No more yellow on white please. People's eyes<br>
are not good and what you see on a washed out projection is not as good<br>
as what you see on your screen.<br>
<br>
3. Gliffy.com . That way your diagrams look great and you have MORE of<br>
them. More diagrams done more easily usually makes for a much better<br>
presentation.<br>
<br>
4. Be more offensive. Don't worry as much about SELLING your idea but<br>
think more about showing the metrics behind your success. We usually ask<br>
at the end for more NUMBERS. How does your technique compare to other<br>
things that generate numbers? Feel free to call people out. You can name<br>
names in your research. You can say "I dont' think this works the way<br>
they say it does."<br>
<br>
5. Think bigger picture. So many people talk about their technique but<br>
don't talk about what that level of success means for the larger world.<br>
We want to see "if the level of effort for X is so small, what does that<br>
mean for people trying Y?" What are the defenders going to do next to<br>
stop you? Is this something really easy for them, or really hard?<br>
<br>
6. People do movies instead of demos, but they make the font in the<br>
movie terminals the default, instead of GIANT SO BIG FONT THAT WE CAN<br>
SEE IT. Please when you make a demo movie for a presentation, make the<br>
fonts 20% larger than you think they need to be for a blind person to<br>
read them from the back row.<br>
<br>
7. More screenshots, with big fonts in them. People love to see<br>
screenshots because they illustrate your bullet-list points very clearly<br>
sometimes (i.e. what are the arguments to that thing you wrote again?).<br>
<span class="HOEnZb"><font color="#888888"><br>
-dave<br>
<br>
<br>
</font></span><br>_______________________________________________<br>
Dailydave mailing list<br>
<a href="mailto:Dailydave@lists.immunityinc.com">Dailydave@lists.immunityinc.com</a><br>
<a href="https://lists.immunityinc.com/mailman/listinfo/dailydave" target="_blank">https://lists.immunityinc.com/mailman/listinfo/dailydave</a><br>
<br></blockquote></div><br></div>