DEF CON's hacker-in-chief faces fortune in medical bills after paralyzing neck injury
- Reference: 1736261110
- News link: https://www.theregister.co.uk/2025/01/07/def_con_security_chief_injured/
- Source link:
The prominent industry figure, whose work has spanned roles at tech companies such as Vodafone and Okta, including ensuring the story lines on [1]Mr Robot and The Real Hustle were factually sound, is recovering in hospital.
Speaking to The Register , Rogers confirmed his prognosis is good and he's now doing much better than he was three weeks ago when the incident, the nature of which he didn't detail, took place.
[2]
Whatever the incident was, it left the cyber pro with a broken neck, but he wasn't aware of this at the time. He had no symptoms other than some "manageable neck pain," and nothing out of the ordinary showed up on a routine X-ray and an MRI wasn't possible due to insurance delays.
[3]
[4]
A week later, Rogers started losing some sensation in his hands and tried to have the MRI rescheduled, but the approval from his insurance company never came. While waiting for said approval, he and his family holidayed in northern California and by the time he returned on December 30, he says he lost "about 20 percent sensation and a similar amount of mobility in both arms."
With doctors unwilling to delay further treatment any longer, he was rushed for additional scans that revealed cervical vertebrae and tendon damage, requiring surgery on New Year's Day.
[5]
"On the 31st, before the surgery could happen, my disc and vertebrae came apart," Rogers said. "Overnight I lost all sensation, all mobility, and became quadriplegic.
"The morning of the 1st, the amazing neurosurgery team at John Muir, Walnut Creek operated. They fished out the pieces and filled the gap with a cage containing a bone graft. This was to grow a new section of spine and fuse the remaining parts. They decompressed the cord and bolted everything back together.
"They also decided to shave me into Sabretooth. As of an hour after the surgery, I regained 75 percent of my sensation and could move all my limbs, fingers, and toes. I have a ways more to go including learning to do stuff like walk, hold a cup, and brush my teeth but the prognosis is good."
[6]
Marc Rogers in a neck brace and good spirits while recovering from spine surgery – click to enlarge
Rogers is spending his time in the hospital in a neck brace. A testament to his dedication to the field, he's also passing the hours by investigating the [7]Salt Typhoon intrusions and hunting threats using the tools available to him.
"Due to stubbornness and persistence, I have almost full use of my thumbs," he said. "That's enough to type on my phone keyboard. Even though I can't use a regular keyboard, that's enough to keep me operational in bursts, though I tire after a short period of time.
[8]
"The medical staff picked me up, gave me a new spine, and have supported me every step of the way. The neurosurgical team worked miracles and it's entirely to their credit that I was hunting threats just four days after being a quadriplegic."
His wife, children, friends, and family are visiting daily, and the various contacts from friendly faces in the cybersecurity community are keeping him company too.
"They have been my support and my motivation to stay mentally active. The first three days I couldn't sleep due to the pain. I existed almost entirely on a diet of spicy memes."
Rogers said it will be around four to six weeks before he returns to basic independence and is able to travel, but a full recovery will take up to six months. He begins a course of physical therapy today, but his insurance will only cover the first of three required weeks, prompting friends to set up a fundraiser to cover the difference.
[9]Volunteer DEF CON hackers dive into America's leaky water infrastructure
[10]DEF CON badge disagreement gets physical as firmware dev removed from event stage
[11]DEF CON Franklin project enlists hackers to harden critical infrastructure
[12]CrowdStrike president cheered after accepting 'Epic Fail' Pwnie award
"It's a sad fact that in the US GoFundMe has become the de facto standard for covering insurance shortfalls," he said. "I will be forever grateful to my friends who stood it up for me and those who donated to it so that I can resume making bad guys cry as soon as feasibly possible."
The cybersecurity community has rallied together to support [13]Rogers' fundraiser , which at the time of writing has accrued just over $63,000 in donations, with just over half of the total sum raised so far.
Katie Moussouris, founder and CEO at Luta Security, described Rogers as "one of the finest hackers & humans to ever hack the planet," while the folks over at vx-underground offered their affections, calling him an "old-school nerd."
"[He] is lucky to be alive and we are luckier to be able to help him," Moussouris added.
Rogers has an impressive cyber CV. Beginning life in cybersecurity back in the '80s when he went by the handle Cjunky, he has gone on to assume various high profile roles in the industry.
In addition to the decade leading Vodafone UK's cybersecurity and being the VP of cybersecurity strategy at Okta, as already mentioned, Rogers has also worked as head of security at Cloudflare and founded Vectra, among other experiences.
Now he heads up security at DEF CON, is a member of the Ransomware Taskforce, and is the co-founder and CTO at AI observability startup nbhd.ai.
If you hadn't heard of him from any of these roles, or from his work in the entertainment biz, he's also known for his famous research into Apple's Touch ID sensor, which he was able to compromise on [14]both the iPhone 5S and 6 during his time as principal researcher at Lookout.
Other consumer-grade kit to get the Rogers treatment include the short-lived [15]Google Glass devices , also while he was at Lookout, and the [16]Tesla Model S back in 2015. ®
Get our [17]Tech Resources
[1] https://www.imdb.com/title/tt4158110/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Z31dtYV9VxBt4bCF0Gqq5AAAAJU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z31dtYV9VxBt4bCF0Gqq5AAAAJU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Z31dtYV9VxBt4bCF0Gqq5AAAAJU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z31dtYV9VxBt4bCF0Gqq5AAAAJU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://regmedia.co.uk/2025/01/07/marc_rogers_recovering_portrait.jpg
[7] https://www.theregister.com/2025/01/06/opinion_column_cybersec/
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Z31dtYV9VxBt4bCF0Gqq5AAAAJU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[9] https://www.theregister.com/2024/11/24/water_defcon_hacker/
[10] https://www.theregister.com/2024/08/13/defcon_badge_disagreement_gets_physical/
[11] https://www.theregister.com/2024/08/12/def_con_franklin_project_hopes_hackers/
[12] https://www.theregister.com/2024/08/12/crowdstrike_president_cheered_following_acceptance/
[13] https://www.gofundme.com/f/support-marc-rogers-road-to-recovery
[14] https://www.theregister.com/2014/09/24/iphone_touchid_hack/
[15] https://www.theregister.com/2013/07/17/google_glass_qr_exploit/
[16] https://www.theregister.com/2015/08/06/tesla_security_vulns_ota_/
[17] https://whitepapers.theregister.com/
The insurance company always wins.
It was the hospital who refused to do the MRI without an upfront payment. Doctors and hospital management decided when and what treatment you get, not insurance companies.
And now, imagine this happens to a nobody
... who isn't able to raise the money via a GoFundMe
I am glad to live on the right side of the pond.
Re: And now, imagine this happens to a nobody
Quite a contrast and compare isn't it!
I'm with you, glad monetary cost is a secondary thought to primary health care this side of the pond.
Never quite understood the astronomical costs of medical care in the US, not that I'm doubting it's expensive, but you've got to think about the profit, not the patient.....That's the motto/mantra isn't it?
Re: And now, imagine this happens to a nobody
Healthcare in the US is priced high by the insurance company's scam. They run the health industry. Every single item, process, review has to be insured at every step of process. Health insurance is the most profitable CEO job there is. (besides maybe weapons and oil) With huge bonuses when you prevent payout to customers that need medical services.
It's why so many people didn't care so much when the guy was shot last month, due to his employment in the evil empire.
Greedy people rule the world, because nobody else wants to.
Dark Tangent should pitch in heavy for him, after all, he got rich off of people like him working for free at the Con.
"his insurance will only cover the first of three required weeks" of six months
You could make me the head of Google with all the salary that that entails, and the first thing I would do is move the HQ to country where it's as complicated as paying your taxes and getting healthcare when you need it.
Re: "his insurance will only cover the first of three required weeks" of six months
I'm by no means going to try and defend the indefensible - the US healthcare system is one of the worst examples of unconstrained capitalism that I've ever seen but neither am I going to extol the virtues of a solely taxation funded healthcare system (for example the NHS) because, well, there aren't many. In fact, as with almost all publicly funded entities it's become inefficient, bloated, expensive and self-serving with costs rising while the availability & quality of care has declined sharply.
There has to be a better way - some way of blending the benefits from both models while leaving behind their worst excesses. Healthcare should not be based entirely on the ability to pay but funding it solely from general taxation and operating it as a purely public service also doesn't seem to work too well.
It never ceases to amaze me how appallingly awful the US healthcare system has become. Wow, just wow.
but the approval from his insurance company never came.
Here's how it works:
- A qualified doctor decides on the treatment and performs it.
- He sends the insurance company a bill.
- The insurance company pays up.
So what was the accident?
My money is on an upside-down copy of the Kama sutra.
Advancements in hacking and anti-hacking techniques come at breaknecking speed.
I will see myself out.
I'd have thought that if his condition was aggravated by the insurance company's delay it's they who are going to be out a lot of dollars. But I suppose it works differently in the US.