The Human. Now You Know All About

I Believe In Having Each Device Secured And Monitoring Each Device, Rather Than Just Monitoring Holistically On The Network, And Then Responding In Short Enough Time For Damage Control.

Social Engineering Is Using Manipulation, Influence And Deception To Get A Person, A Trusted Insider Within An Organization, To Comply With A Request, And The Request Is Usually To Release Information Or To Perform Some Sort Of Action Item That Benefits That Attacker.

Security Is Always Going To Be A Cat And Mouse Game Because There'll Be People Out There That Are Hunting For The Zero Day Award, You Have People That Don't Have Configuration Management, Don't Have Vulnerability Management, Don't Have Patch Management.

Oracle, For Example, Has Even Hired People To Dumpster Dive For Information About Its Competitor, Microsoft. It's Not Even Illegal, Because Trash Isn't Covered By Data Secrecy Laws.

I Did Get A Huge Endorphin Rush When I Was Able To Crack A System Because It Was Like A Video Game.