A public policy lens on DEF CON and Black Hat