There are two stages of a security career: Before you know the truth of what you read in the news on an incident, and after, when you know exactly what happened and can't say a single fucking thing.
-
There are two stages of a security career: Before you know the truth of what you read in the news on an incident, and after, when you know exactly what happened and can't say a single fucking thing.
-
There are compensating controls and defense complexities that delayed or simply didn't work in many cases, through even further complexity. A narrative of how the attacker made 1=1 is not the complete story but telling that is so full of minutia and NDA it's basically not worth trying.
-
Kristian Harstadreplied to SwiftOnSecurity last edited by
that's the reality of involvement and influence. there are unsung heroes aplenty in history fighting and winning all sorts of battles people do not and, at least for a time, must not know about.
making a difference, rather than making headlines. ️
-
Fi, infosec-aspected 🏳️⚧️replied to SwiftOnSecurity last edited by
With respect: skill issue.
Storytelling requires understanding the full dependency tree of how the thing came to be, absolutely. And some of those factors may well be NDA'd.
But conveying the narrative of what happened does not require a full prospectus of those NDA'd components - it's fine to elide it to "a library function was called that had this effect".
Not every detail is required for the narrative to make sense and to provide useful information. Nobody cares what color hat Jack the Giant Killer wore when he climbed the beanstalk; they care about the goose with the golden eggs and how he got hold of it.
-
@munin @SwiftOnSecurity Someday, I'll write as eloquently as this and not just my brain's interminable vomiting through my fingers.
You write, hands-down, the best of anyone posting or shitposting on here by such a wide margin it's not even close.
-
Fi, infosec-aspected 🏳️⚧️replied to NosirrahSec 🏴☠️ last edited by
You can have this skill too. Read poetry - from many different traditions. Write poetry for yourself.
And with practice, you'll learn how to trust yourself to express ideas to others and trust them in turn to understand your intent.
-
@munin @SwiftOnSecurity I find that my best writing comes to me in a state of sleep deprivation, as odd as that sounds.
It's like exhaustion prevents my ADHD from blurring the path forward while I talk and/or write. I can get to the point and not get sidetracked by emotional dysregulation.
-
Fi, infosec-aspected 🏳️⚧️replied to NosirrahSec 🏴☠️ last edited by
That doesn't sound odd to me in the slightest.
It's the same reason why shitposts succeed where thought-through sincereposts get no traction:
When you allow yourself to express your intent without second-guessing whether people will understand your intent,
you likewise won't curate your words to be 'appealing to a broad audience'
which means that, yes, perhaps you lose some niches that might otherwise find your words appealing, but you'll gain far more in return from the people who are able to synchronize honestly and openly with your intent - people who your overly curated normal posts would alienate.