If you have ever gone looking for a specific security conference talk on YouTube, you probably know the experience, right, you remember a researcher presenting something genuinely important at one of the big conferences, a new technique, a clever piece of research into how some system can be abused, and when you search for it you find either nothing, or a recording buried in a conference channel with thousands of other sessions, titled with the talk's original programme name, a thumbnail showing a distant figure on a dark stage in front of an unreadable slide, and a view count that bears no relation to how good the talk was.
Security conferences produce some of the best technical content in the entire industry, and a huge amount of it disappears almost immediately after the event, not because nobody wants it, but because it is packaged for the conference programme rather than for the practitioners who would search for it months later. My studio, ClickTheory, only does packaging, the thumbnail, the title and the opening of a video treated as one piece of work, and I think conference talks are one of the most wasted assets a security researcher or vendor has. So let me walk through how I would rescue one.
Why do conference talk recordings get lost?
Because they are titled and presented for people who were at the event, rather than for people searching for the idea later.
A talk's programme title is written to attract attendees scanning a schedule, and it is often clever, allusive or pun based, which works well on a printed agenda and very badly in search, because nobody types a pun into YouTube. The conference channel then uploads hundreds of sessions at once, each with the same template, the event logo, the session title and a still from the stage, so every video looks identical and none of them stands out. And the stage footage itself is usually wide, dark and low resolution in the areas that matter, the speaker is small, the slides are unreadable at thumbnail size, and there is nothing in the frame that tells a practitioner what the talk is about.
The result is that a talk which might have been genuinely useful to thousands of security practitioners reaches a few hundred, mostly people who attended or who already knew the speaker. The research deserves better, and so does the researcher or the vendor they work for.
Can you just re-upload the conference recording?
Sometimes, and it is worth checking properly first, because conference recordings are usually owned or controlled by the conference, not the speaker.
Many conferences retain the rights to their session recordings, publish them on their own channels, and have terms about whether speakers or their employers can republish them. Some are relaxed about it, some are not, and the answer can depend on the specific event and year. So the first step is always to check the speaker agreement or ask the conference directly. Where re-uploading the original recording is allowed, repackaging it is simple. Where it is not, or where the stage footage is poor, there is a better option anyway.
That better option is re-recording. A researcher who has given a talk once already knows the material cold, and recording a studio version, the same talk, often tightened and improved based on the questions the audience asked, typically produces a far better video than the stage recording, with clear audio, a well lit speaker, readable slides and the freedom to cut the parts that only worked live. It also sidesteps the rights question entirely, because the new recording belongs to the researcher or their employer. For a vendor whose researchers speak at several events a year, re-recording every talk is one of the highest value content habits I know of.
How should a repackaged talk be titled?
Around the technique, the system or the finding, in the words a practitioner would search for, because the original programme title almost never matches how people look for the idea.
A talk given under a clever title about, say, a class of authentication weakness might be retitled as "How Attackers Bypass Authentication in Misconfigured Single Sign-On", which names the technique and the system plainly. The conference name can still appear, because it adds credibility, for instance as a short note at the end of the title or in the description, but it should not lead, because it is not what people search for. If the talk introduced a named tool or a named technique that has since become known in the community, that name is exactly what practitioners will search for, and it belongs near the front. The general principle of titling for search rather than for the original context is covered in repackaging old videos for search.
A conference title is written to fill a room for an hour. A YouTube title has to be found by someone searching for the idea a year later.
What should the thumbnail show?
The researcher, clearly, and the single most important visual idea from the research, drawn to be readable at small size.
If the video is a re-recording, this is easy, because the studio footage gives you a well lit speaker to work with. If it is the stage recording, the speaker is often too small and too dark in the original frames, and the best approach is usually a separate, well lit photo of the researcher, combined with the key visual from the talk. That key visual is often a diagram, an attack path, a system architecture with one weak point highlighted, a before and after of a configuration, and it needs to be redrawn boldly, because slides are designed to be read on a large screen in a room, not on a phone. One diagram, three or four elements, thick lines, almost no text, is usually far more effective than any screenshot of an actual slide. The approach for cybersecurity thumbnails more generally is in cybersecurity YouTube thumbnails that earn clicks without fear bait.
How do you turn one talk into several videos?
By treating the talk as raw material, which is exactly what it is, and cutting it into pieces that each answer a specific question.
The defender's angle is often where the most durable traffic comes from, because while a novel attack technique attracts attention for a while, the people searching for how to detect or prevent it keep searching long after. A researcher who presented an attack can usually record a short follow up on detection, and that follow up often ends up being the most watched piece of the whole set. The general mechanics of turning one long piece into several are in repackage your back catalogue.
What about talks from years ago?
Those are some of the best candidates of all, because older talks on techniques that are still relevant often have a large potential audience and almost no competition from well packaged versions.
A security vendor or a prolific researcher may have a decade of conference talks sitting on various channels, many of them on techniques and classes of vulnerability that are still very much in use. Going back through that archive, identifying the talks on techniques practitioners still search for, and repackaging them, either by re-uploading with permission or by recording updated versions, can build a substantial library quickly, and it is usually far faster than producing entirely new research content. For large archives, the approach in bulk repackaging old videos applies directly.
How does this fit into a wider conference content strategy?
As one part of it, because the talk itself is only one of many assets a security company can capture at a conference.
A vendor attending a major security conference is usually surrounded by content opportunities, their researchers' talks, conversations with customers and practitioners, booth demonstrations, interviews with people they would never otherwise get in front of a camera. Capturing all of that properly can produce months of content from a single week, which is the subject of Pixel Samy's guide on getting a year of assets out of RSAC and Black Hat. The repackaged talks are often the most technically valuable part of that library, and packaging is what makes them findable once the conference is over. Webinar recordings have the same problem in a different form, which is covered in cybersecurity webinar replays deserve real packaging.
What does it take to repackage a library of talks?
Mostly design and title work per video, which is what our packs cover, and for large archives the bulk approach keeps it manageable. Pricing starts at $250 for a pack of eight custom thumbnails, each one designed for its specific video rather than from a template, and a title pack is worth adding for conference talks specifically, because retitling around the technique is where most of the recovered search traffic comes from. The details on packs, add-ons and turnaround are on services, and most of the channels we work with in security sit close to our tech channel work.
If you have a researcher whose best talks are buried under conference session titles, get in touch and I will pick the three I think would find the biggest new audience if they were repackaged, does that make sense. So yeah. That's my way of saying it.