The infosec community has undergone a post-Weinstein cultural shift, as evidenced by the soul-searching following allegations against Morgan Marquis-Boire
In 2015 I noticed something odd on Twitter — without context or explanation, Andrea Shepard, a Tor developer, had posted a string of random letters and numbers.
Context & Ripple Effects
This essay lands two months after [[a:923171|Morgan Marquis-Boire was cut loose from EFF, First Look, Citizen Lab and other institutions]] following sexual assault allegations — the moment when the community's most celebrated security figure went from keynote circuit to unperson overnight. The piece frames that rupture through Tor developer Andrea Shepard's cryptic 2015 posts, arguing the allegations triggered a Weinstein-style wave of soul-searching about how hero worship insulated prominent men in infosec.
What makes the story worth tracking is its long tail: eight years later, reporting revealed Marquis-Boire had quietly resurfaced as the undisclosed co-founder of crypto intelligence firm Unciphered, suggesting the 2017 reckoning changed institutional affiliations more than career trajectories.
First-order effects
- EFF, First Look Media, Citizen Lab and Marquis-Boire's other affiliates immediately lose a marquee name whose personal brand was central to their public credibility, while colleagues who vouched for him face questions about what they knew.
Second-order effects
- Other security organizations are pushed to audit their own dependence on celebrity researchers, since the same trust dynamics that elevated Marquis-Boire — reputation as currency at conferences, in disclosures, in hiring — apply across the field.
Third-order effects
- If the pattern holds, accountability in infosec remains episodic rather than structural: institutions sever ties under press pressure, but the underlying hero-culture economics let accused figures rebuild elsewhere, as the Unciphered episode shows.
The trend: Security communities built on individual trust and celebrity are confronting that their accountability mechanisms fire only episodically, leaving room for quietly rebuilt careers after public reckonings.