MinuteCon 2027
Rules of Engagement.
How we expect everyone to show up: attendees, speakers, sponsors, and staff.
The Short Version
MinuteCon is a conference for the security community, by the security community. We expect every attendee, speaker, sponsor, volunteer, and staff member to treat each other with respect and to act in ways that reflect well on this community.
Don't harass people. Don't attack the venue infrastructure. Don't be the reason we can't hold this event again. If someone tells you to stop, stop. If you see something wrong, say something.
Our Commitment
We are committed to making MinuteCon a welcoming environment for everyone, regardless of gender, gender identity and expression, sexual orientation, disability, physical appearance, body size, age, race, ethnicity, nationality, or religion.
We do not tolerate harassment of conference participants in any form. This applies to all conference spaces: talks, workshops, hallways, parties, social events, and online channels associated with MinuteCon.
Conference staff are here to help. If you are being harassed, notice that someone else is being harassed, or have any other concern, please contact a staff member immediately. We will take every report seriously and act on it.
Expected Behavior
These aren't rules to memorize, we're spelling them out so there's no ambiguity.
- Be kind and respectful in your interactions with others.
- Wear your badge in a clearly visible position, at all times, within the event space or any social event that requires conference badge for entry.
- Exercise consideration for differing viewpoints and experiences.
- Give constructive feedback. And if provided, receive it gracefully.
- Accept responsibility when you make a mistake. Apologize to those affected.
- Focus on what's best for the community, not just yourself.
- Be mindful of your surroundings and your effect on other attendees.
- Alert staff immediately if you observe a dangerous situation or someone in distress.
- Respect the decision of speakers and organizers to not share certain material publicly.
The following will likely result in immediate removal from the conference. No warnings, no refunds.
- Harassment, intimidation, or discrimination in any form.
- Offensive verbal comments or jokes targeting gender, sexual orientation, disability, physical appearance, body size, race, ethnicity, religion, or nationality.
- Deliberate intimidation, stalking, or following.
- Unwanted photography or recording of any attendee.
- Sustained disruption of talks, workshops, or other events.
- Inappropriate physical contact or unwelcome sexual attention.
- Posting or threatening to post personally identifying information ('doxxing').
- Advocating for, or encouraging, any of the above behaviors.
- Attacking, probing, or attempting to compromise conference network infrastructure, venue systems, or any other attendee's devices without explicit consent.
- Performing or demonstrating offensive techniques against live systems or targets you do not own and have not been authorized to test, regardless of how interesting the research is.
- Recording talks or sessions that speakers have explicitly marked as no-recording.
Reporting an Incident
If you are being harassed, witness harassment, or have any concern about the conduct of another participant, please report it to a staff member immediately. Staff will be identifiable by the t-shirts they are wearing on the conference floor.
Reports are reviewed by the organizing team and treated with strict confidentiality. We will not share your identity without your explicit permission.
We will never pressure you to take a specific course of action. What matters most is that you feel safe.
Conference staff have full authority and final discretion to take any action they deem appropriate in response to a conduct violation. This includes:
- A verbal warning.
- Removal from a specific session or event.
- Expulsion from the conference without refund.
- A ban from future MinuteCon events.
- Referral to venue security or law enforcement.
We will always prioritize the safety and wellbeing of the person who was harmed over the comfort of the person who caused harm.
Venue & Network Policy
We're guests here. The venue has extended us trust, and we intend to honor it.
Do not attack, probe, or interfere with the venue's network, physical infrastructure, HVAC, access control systems, A/V equipment, or any other systems, even passively. This includes passive scanning, packet capture on shared segments you're not authorized to monitor, or any active enumeration of venue systems.
A dedicated conference network may be provided for attendees. Treat it as untrusted and act accordingly.
Physical spaces, including the venue, session rooms, sponsor areas, and any affiliated after-parties, are covered by this policy. Unauthorized access to restricted areas is grounds for immediate removal and may involve law enforcement.
Photography & Recording
Speakers set their own recording policy. Sessions marked 'NO RECORDING' must not be recorded: no audio, no video, no screenshots of slides. Respect this without exception; many speakers share sensitive material precisely because of this protection.
Photographing attendees without consent is not permitted. If you want to photograph someone, ask first. If they decline, move on.
Press and media must identify themselves to conference staff before the event and must abide by the same consent requirements as all attendees.
MinuteCon staff may photograph and record sessions and common areas for conference documentation. If you'd prefer not to appear in official conference media, let us know at registration and we will do our best to accommodate you.
Alcohol & Substances
Alcohol may be available at official MinuteCon social events. If you choose to drink, do so responsibly. We reserve the right to ask anyone who appears intoxicated to leave.
Illegal substances are not permitted at MinuteCon events or the conference venue under any circumstances.
Research, Disclosure & Demos
We celebrate original research and live demonstrations. We also believe in responsible disclosure, not because we're timid, but because the goal is to make things more secure, not to create chaos.
If your talk includes vulnerabilities in vendor products or third-party systems, we expect that you have followed responsible disclosure practices, including notifying the affected vendor with reasonable advance notice before presenting publicly.
Live exploitation demonstrations must only target systems you own or have written authorization to test. Demonstrations against live public infrastructure, attendee devices, or venue systems are not permitted regardless of how compelling the research is.
If your research touches on legal grey areas, talk to a lawyer before you talk to us. We strongly encourage speakers operating in sensitive territory to consult with the EFF or a legal professional familiar with computer security law. EFF's Coders' Rights Project is a good place to start.
This code of conduct draws from various other security conferences we love and respect. Version 1.0. Effective MinuteCon 2027.