I have been in information security for over 20 years. I have seen trends come and go, vendors rise and fall, and the same vulnerabilities exploited decade after decade.
This blog is where I write about what frustrates me about this industry. Which is most of it.
I have worked as a SOC analyst, security consultant, penetration tester, and security architect. I hold certifications that I am increasingly skeptical of. I have spoken at conferences that I mostly enjoyed.
I do not use my real name here because I still work in the industry and I prefer to keep my employment and my opinions in separate containers.
Contact
Email: [email protected]
I read everything. I respond when I feel like it.