A network security talk that is grounded in reality! Yes, attack is way cooler than defence, but at least 50% of people have to do defence, so here's a talk for all those in the corporate sponsored seats. At Etsy, we've traditionally eschewed common knowledge on what works and what doesn't and hand sewed our own path to security. This talk, briefly, shows some of the more interesting things we've done, despite being a website that sells knitting patterns. Topics include: * IDS that isn't a complete waste of €100,000. * the one firewall per child project. * rootkits, making them work for you. * what to do about the "Zero Day Problem".