Poisoning the Well: How Decoys and Misdirection Protect Privacy When Opting Out Isn’t Enough

Rachel Vrabec

What do you do when data opt-outs and removal aren’t options? You make your personal data harder to find, harder to trust, and harder to act on. Drawing on real casework from advanced security clients, this talk covers open-source and vetted closed-source techniques for generating synthetic noise in personal targeting datasets, including a real case study with an honest post-mortem on what worked and what didn’t, plus a breakdown of state-level address confidentiality programs as a legal shield against non-government actors. Attendees will leave with a practical threat model and a clear framework for knowing when removal is effective, when deception is necessary, and when disruption is the only move left.

Friday 1800 Gramercy Park Suite


Rachel Vrabec is the founder and CEO of Kanary, an industry-leading attack surface management company protecting people’s digital lives at scale. A Northwestern University graduate, she built her technical foundation at IBM and Civis Analytics, the data science firm born out of the Obama for America campaigns. Watching the Cambridge Analytica scandal and DNC hack unfold from inside that world convin ced her that personal privacy needed a dedicated defender. She has been building privacy and security software since 2017, earning a YC grant, a spot in Mozilla Builders, and backing from the founders of DataDog, GitHub, and 2048 Ventures. Her work has been featured in Forbes, Rolling Stone, The Washington Post, and The New York Times.