Enigma 2023

People keep making terrible decisions. Shockingly often, bad decisions are because of perverse metrics—metrics that are technically correct but drive people to bad decisions. This is an especially bad problem for security, privacy, abuse, and related fields: we have adversaries, we have unknowns, and we have many small risks with incredibly high impacts. In this talk, we'll go through the types of perverse metrics—and how to avoid them.