Conversation

Notices

1. Embed this notice
   The Psychotic Network Ferret (nuintari@infosec.exchange)'s status on Wednesday, 18-Dec-2024 04:45:58 JST The Psychotic Network Ferret

   • silverwizard

   @silverwizard If 1/100th of Infosec was actually effective, ransomware would be a solved problem.

   I swear to god, actual security is blocked by most infosec professionals.

   Dealing with infosec costs most companies more than they ever stand to lose in an actual incident.

   Outliers exist, but even then, I firmly believe that deploying sanity in lieu of more IDS/IPS/Wankerware would pay mad dividends.

   In short: Stop wasting your money on security wank, and hire two extra peeps who can handle basic patching and attention to detail.

   • Embed this notice
     The Psychotic Network Ferret (nuintari@infosec.exchange)'s status on Wednesday, 18-Dec-2024 04:35:09 JST The Psychotic Network Ferret

     I've always considered myself a hacker.

     I've attended a literal fuckton of hacker conventions. Hell, I've helped run a few. Even spoke at a few.

     A small problem I noticed recently.

     Infosec people think they are the only hackers.

     I noticed this first when, at a hacker con, explaining what I do to some person, I was met with, "Wait, you are in Ops? Why are you at a hacker con?"

     BECAUSE HACKER HAS NEVER MEANT INFOSEC WORKER! BECAUSE I AM LITERALLY OLDER THAN THE HAIR ON YOUR BALLS! BECAUSE I WAS TAKING APART COMPUTERS YOU'VE ONLY READ ABOUT WHILE YOUR POTENTUALLY SMARTER BROTHER RAN DOWN YOUR MOTHER'S ASSCRACK!

     Not even recently, I noticed this in the late 2000s, and it became an ever more constant refrain over the years.

     Hacker used to mean anyone who tinkered. Anyone who broke stuff, fixed stuff, or just found a whack ass way to use stuff. Hackers sought understanding above all else. This often meant we were into security, but not always.

     We used to be a community of builders, shapers, makers, and dreamers.

     The "infosec" community? It's a bunch of pretentious, self righteous, asshats who believe their word exists above all others. It's a "community" of assholes who are desparate to prove they are the best.

     I'm fucking tired of it. I've been running carrier grade networks for 25 years now, and I am convinced that the best information security comes from basic IT competence, and has almost nothing to do with any infosec oriented initiative.

   • Embed this notice
     fedops 💙💛 (fedops@fosstodon.org)'s status on Wednesday, 18-Dec-2024 04:55:19 JST fedops 💙💛

     in reply to

     • silverwizard

     @nuintari @silverwizard infosec is a self-sustaining business model. Nobody is interested in draining the swamp that feeds them.