Keynote: Career Lessons from 30 Years in Security

Andrew also is the CEO of liquid Labs the research and development arm of liquid and telecommunication aside from the heavy focus on routing Technologies and the right code exactly what I've Just Seen red scored primary UNC golang and assemble primarily revolving around the testing and implementation of routing Technologies as part of the r d efforts into the latest Technologies outside of his professional life Andrew enjoys spending time with family scuba diving deep sea fishing and spending time in the National Pakistan to support some of the more AUC Wildlife which I know have some Wildlife here we're going to find somewhere so I'm not saying so much I'd like to invite Andrew Osborne our keynote speaker and as this works

the front I like us to stand up and give you a lot of uploads foreign

wow it's it's morning and I went to bed this morning at 4 30 this morning after sitting there and trying to figure out what I was going to say today because my life and my career I've presented all over the world I've presented now I have about 113 countries most of the time I'm presenting on technical theft which is objective theft and it's really easy to do that but with your facts you've been a slide deck and that's what you present today however I'm going to be doing something different I'm going to tell the story of how I got to where I am and share some lessons over the last 30 years and yes I'm only 42 and I did say 30 years

I've been at this for a long long time and somehow even since the age of 12 I've managed to survive this industry and that'll be part of the lessons that I'm going to try and share with you I'd encourage you guys to ask questions as I go if you've got a question stop me put up your hands there's no such thing as a stupid question there are plenty stupid answers and I'm sure I've got plenty of them but ask interact because that way you can get the most out of this so I'm going to start this off with a little bit of my story before I start going into the lessons I grew up in South Africa in a small

little town called East London it's halfway between Port Elizabeth and Durban and it was a really small town the only thing there is in Mercedes production plant and if Merc ever stopped pulls out of South Africa the whole town disappears I had a father that was academically obsessed I mean really he was academically obsessed um give the child coordinator for the country Deputy head of the teacher Center and it's an interesting thing to note considering what I'll tell you in a little bit about my own academic history but suffice to say that academics didn't really work for me I was frustrated I was bored and at some point at age 12 someone did some things to me that

I needed to deal with and there were no adults around that were going to help me deal with that and I realized even back then the only way that I could Ensure that the individual who had hurt me would never hurt someone again was if I dealt with him to do that I needed knowledge I needed skills because I was a kid I was 12. but I also had a computer and I had a way to get online even that at age 12. the City University in our town had a Yale lock on the door which means you could come in as long as the doors open or you had a key before no key you came in but you

could let yourself out and the University campus used to shut down at eight o'clock at night and everybody would go home so you walk onto the campus at 7 50 p.m you've got that in the bathrooms to help us later budge everybody goes home you know to the staff lab you boot through their security systems you hack into the Linux server at the University down the road you spend all night online until one day the senior lecturer comes back at three o'clock in the morning and you'll get that the campus for life until overtime anyway uh but I could get online and at that point I was driven I was driven to get to a skill level

that would allow me to react and to ensure that what had happened to me could not happen to anybody else and it became an obsession I spent the next 10 years of my life studying learning and gaining skill 20 hours a day that was all I did that was my focus 10 years came I got what I wanted you'll never hurt anyone again but there was a lesson from this and the lesson is is that the drive to succeed and the drive to get that skill and come from many places some of them can be good solid places some of them can be very dark but the trick is the drive what are you taking in your life

that is giving you that drive to keep learning because this industry is a harsh place I'm going to be straight with you this industry your average burnout time for somebody in senior technical positions it's less than 15 years people burn out and I'll talk a bit about dealing with that as well but it requires a passion and it requires a drive particularly because you're entering into a very competitive industry and if you don't have that drive keep learning and to keep growing somebody else is going to and then you're going to find yourself at the back of the pack that drive is critical so moving a little bit from that I also knew at the time that I had this

computer at home I didn't have what I wanted and I needed little upgrades I needed the latest box of floppy disks to go copy something Etc but my folks had no money we did not grow up well and so I couldn't get it from them so I went to like band on every door in that town for every computer shop everywhere and I said give me a choice over and over again and at age 12 I finally found a guy who would give me the chance and I started working on the shop floor of a place called Network Three Computer Services and I spent three years working that shop floor once a week on a Saturday

morning I've got 200 bottles a week but half the time I'd hold them to keep the money I just wanted a box of floppies or I wanted the latest MFM controller or I wanted this or that and it was about getting the tech but it was also about getting experience it was about building contacts and then at about age 16 and I find it very funny that I'm standing in a university and probably going to give all the all the professors here hot value at this point but at age 16 I went you know what I need to move Beyond this town Beyond where I am and I need to grow further so I was sitting in the middle of

science class right 10. and I started putting my books in my bag and my science teacher looks to me and goes what are you doing and I said well I'm leaving she said what do you mean you're leaving I said exactly there shall I shut up and I walked out and I walked down to my dad's office which was nearby and sent him I need to borrow 200 Rand he said what on Earth thought I said well I just put School I've organized myself a job down in Cape Town a thousand K's away and I'm out of here another Community said as much as I disagree with you I know that I'll never stop you and

you're going to do it anyway so here's the 200 bucks good luck son and so I got on that bus so I left and I went down to Cape Town where I started a job as a software engineer well actually it was more software consultant we were doing accounting system installations in factories Specialists serial done term Stuff Etc and I worked at this company for a couple of months but here's the thing 16 alone in a huge City I realized that I still needed my family and eventually I packed up and I went home and it took me a long time of being at home to realize that moving out into the world was more than about tech skill

it also had to do with an emotional maturity it had to do with the ability to build relationships something that at 16 I wasn't sure that I really was equipped for I thought I was but I wasn't really there and it's taken me a long time to realize that in this industry you have to rely on more than just your text skill your network your contacts your socialization is all important because nobody in this industry survives on their own eventually when I left East London again I I've been hacking for a long time so you talk about hackers well I'm the genuine article I founded 2600 South Africa I'm X virtually every hacking group that

you can name as well as every Wares group and every virus writing group I wrote my third first virus at 13. but eventually when I left home I decided you know what this is all fun and games I actually need to make some money and here's the thing the hacking wasn't making any money starting a security company did so I started a company full side technical well at that point it was Dynamic Network Solutions which two weeks later I sold 50 percent of to our anchored client company called scitec put three years later MTN board scitec and they put the rest of the shares another South Africa's well that was actually Africa's first I.T security

company to my knowledge but it was again a learning experience because I learned from that the beyond the technical skill I needed some business skill as well I had to understand business I had to understand marketing myself to clients I had to understand Finance this industry is symbiotic you cannot get by on a single skill set you can go and join a company and work as a techie for yours but will you write will you achieve what you want if you're not prepared to look Beyond just the hard technical skill it's a multi-faceted industry that forces you to keep growing and learning in a multitude of factors and I started in security but the thing I also realized about security

at that point was that I was looking at this and I was seeing people attacking the application later they were stack smashing and they were buffer overflowing and while being there done that but nobody was looking at the network and so that's when I decided to look next what about network security and in fact the first exploit that I know of that was written to attack the Cisco picks firewall cve 200613 I believe it was written by me 22 years ago in my first attempt to attack the network stack and it worked it was a really really simple exploit basically all I was doing was exploiting a floor in the TCP stack which allowed me to reset the estate tables

because they weren't doing some X sequence checking on reset packets it's a simple thing it was only 60 lines of code but from there I got into this interest in networking and often sold my company I I took a bit of a break in the hoverboard because let me tell you I don't think I'll ever retire because I I tried it once before and I got really bored really quickly and so I took a job at the University of Cape Town which is kind of ironic considering that I'd quit school I still had no degrees today I have no High School but I had a lot of experience at that point and so I joined the University of Cape

Town's I.T department and one day I decided that I wanted something called IPv6 at UCT and we knew that we had to get that from our provider which was tenant the South African academic Network so I went to the Minnesota what IPv6 and I said well we were both bandwidth buying organization we don't have a clue how to do that you wanted you're going to have to do it yourself and I realized at that point there was opportunity for me I had to help them and see where it went and so I went while working for UCP at the uct's permission to work with tenet for half a day a week or whatever and I thought tended to buy me a server

which I bought tunnels on and I wrote the IPv6 GRE stuff that is in the FreeBSD kernel to facilitate this and I got a tunnel up with jayant and we got our IPv6 but at that point remember I was looking for opportunity so I said to tenet if you want to become a real academic Network for the country you can't be about that with organization you have to get technical skill and you have to build a network you need a CTO who knows what he's doing and have a very pragmatic CEO that a guy called Dr Duncan Martin if you look to me and he said five I agree write the job description and make damn sure you apply

so I wrote a job description and I applied guess what I've got the job and I spent eight years as CTO of tenant the South African academic Network and there's a lesson from this story as well it was about opportunity that I went looking for yes right time right place they were a bulk bandwidth organization they needed technical skills but they didn't even know it in your career as you go ahead you have to look for those opportunities and then you've got to make them happen in this industry getting ahead there's a degree of luck to it like everything the right time right place but you've got to be prepared to take those opportunities and to push them a long way necessary

and that happened throughout the course of my career at tenant actually we ended up in a situation where South Africa at that point had a monopoly hotel from South Africa and I'll take decided one day that they advertising this and they went up they challenged Us in the courts and overnight South African industry got deregulated that was him at the same time the seacom cable was coming and we knew that we needed bandwidth and so we file a long complicated process as a small 11-man organization managed to convince the Development Bank to give us 20 million US dollars to put into seacom to buy bandwidth at the same time the South African government had decided they wanted to

build an academic Network except that made a mistake they allocated which at that point of the exchange rates back then was about 80 million dollars to pull this network but it was all in capital they hadn't allocated a single Cent to operationalize this event and myself and the CEO of tenant realized back then that this was pure opportunity they had the money to hold them input but they couldn't operate because you can't operate without money we on the other hand had the universities backing us and that meant that we had operational money but no capital so we struck a deal with the DST and we built this network using their money and then we operated

it the Foster's Network that the continent had ever seen and it remained the fastest Network for more than five years after we built it some of the fastest technology and in fact we took delivery of Technology from Cisco into that Network that was so cutting the edge that they had to ship the line pods with Alpha software because the software for the party we were running and even being created yet and we bought that Network it's a wonderful experience but again it was about taking advantage of opportunity then after spending eight years with tenant and we built this network I realized something I am an operational pie that I was bored and bolted I don't want to

run it I wanted to build it I wanted to design it that's what fun and so I took another Gamble and this is another lesson some of the time you have to gamble you have to take risk and I left and I went out as a contractor but when I went out as a contractor what I was actually doing was interviewing potential employers they didn't know that they didn't need to know that I wasn't going to go and apply for jobs because I know nothing about a company that I'm applying for from an advert however if I can get a contract from it then I get to see them and she does this fit me

and so I took various contracts one day I took a contract with liquid liquid at that point had just bought out kdn Kenya data Networks and so I took a contract to come up here and sort it out and at that point I was flying back and forth to Kenya I would fly in on a on a Sunday afternoon and I fly out on a Friday every week for a year I'd spend a year living in the Serena Hotel and after a year I realized I liked this organization I can do things here and so I said to them you know what save a lot of money if you employed when you stop paying Hotel

balls get me a house basically in Kenya and they went well flight savings Hotel savings okay it's your job again right time right place but I made the opportunity and that is the message that I've cannot stress enough you make those opportunities I got that contract because I was standing up at a conference which I was invited to without the split tenant we were talking about peering and I got to talk there because I used other contacts to build an interconnection with tenet to a point where we were the most interconnected Network on the continent by a long way all through the relationships that I bought and then working for liquid we redid the liquid Network in Kenya

after we took over kdn I bought the IP team in Kenya there the guys who now run the network and one of the guys who was working for us in the mock at that point a guy called Christopher mawangi he's now a CTO of liquid East Africa he started in the lock it didn't take him a lot but it was interesting because when I formed the IP team I said to all of the guys someone needs to lead the scheme someone needs to manage it which of you wants it and tell me why and there's another guy who works for a star called Robert cigar brilliant technique and he looked at me and said Andrew I

don't want that job I'm a ticket and I'm good at it and I know I'm verified and that's where I want to stay Chris said I want to go to the management track said I'm going to go out and do an MBA and went out and did the management track both of them made very smart decisions there one of the things I get when I interview technical people all the time and you send somebody what do you want to do in five years and goes I want to be a manager wrong answer wrong answer because if I wanted a manager I'd be advertising for a manager if I want to tell you I want to take you

and if you ever find yourself in that position realize something be the best techie in the world does not mean you know how to manage that is a very very different skill set and in your career path you need to decide what do you want to do you want to excel technically and be the best of the best or do you want to be a manager they're different things I got lucky when I joined tennis as I said we had a very smart CEO the first thing that he did when I was there was he said Andrew you know what you're good technically you don't know much about management so you're not touching a computer until

you do the next three months for all three months of my life he put me through absolute hell any drummed business into my head I walked away after those three months knowing more about balance sheets and financial statements and you name it that I could if I tell you and I learned at that point that Technical and management are very very different things and one of the things I see so often in this industry is companies love to go here's our best techie we need to pay in one so what are we going to do we're going to promote them we're going to make them a manager it's the worst thing they could ever do

because what happens the texture goes hey I'm becoming a manager more money I'm going to accept that position it doesn't have to do the job within three months he's probably fired the companies lost their best yet because they still don't have a manager and the techie has just ruined his career when you offer opportunities like that ask yourself is this what you really want and can you do it effectively never be afraid to turn down the promotion if the promotion is a poison chalice know your skill set know yourself that is some of the best career advice that I can give to anybody is know yourself and know where your skills lie I also learned a couple of things from

other management that I've worked under and here are some rules for management very basic rules number one always hire smarter than yourself keep in mind that your team as a manager this goes back to the fact that no one can be self-made but as a manager your team is going to make you or break you your team is not there to do your blood work your team is there to make you look good and the only way they're going to make you look good is if they're smarter than you because otherwise you could do it all yourself so go out and hire smarter than yourself and that I'm going to talk a little bit more about in a second

but here's the other thing about teams in business realize the higher up the food chain that you get sooner or later the day is going to come when someone's got a gun into your head life of management if you want your team to have your back you better be willing to take a bullet for your team because if your team is performing well as management it's your job to stand for your team and I've got really simple rules for my guys I always said to them if you screw up but you told me what you're going to do beforehand that's on me I approved it if you screw up and they haven't told me what you're going to do

sorry there's no protection because I can't I can't protect you against something I didn't even know you would do it so it becomes about communication and I've had instances where we were doing a particularly big project and the project went wrong for a whole bunch of reasons

and I find it said to no you're not said I'm the manager that project sits on me you are not taking my team's viruses I said you can take mine give it to my team take it but do not touch the team why do I do that I need their team I need that team loyal to me and this is something I can say as you advance again you are only as strong as the people around you that make you your knowledge you can spend a lifetime in this industry learning it's never going to be enough to cover up it's too false it's too wide one of the other roles that I currently sitting this is an area director for the

internet engineering task force and there are I think there's 15 area directors in total three of them in the origin space and our job is to effectively make sure that everything that comes out is an RFC anyone here ever heard of an RFC rsc's or the standards documents that drive the internet anything that you do on the internet follows a standard protocol those documents are developed inside working groups and eventually they come to the area directors and we have to read those documents and approve those standards globally so you make a change to bgp that Cisco and Juniper implementing me Etc they need to change the standard that goes through us and in this whole kind of process

I realized that as an area director I am nothing without the people are actually doing the work in the working groups I'm actually the least powerful person in the room because all I get to do is a proven they've got to create it but you you learn from these things and again it comes back to your contacts but back to the point about the fact that you can never know everything out there isn't the area director we process around 600 pages of new standards every two weeks think about that 600 pages every two weeks I've got an entire routing director of reviewers behind me which eases some of the load we've got other area directors to ease

some of the load but I can tell you that there are days where I get some of the crypto documents the security and I look at them and I go I'm hoping the security ads about this because No Object I can't understand a word of it I know it know what you know if I can rely on the people around you so so important be willing to listen to people who have more experience remember something God gave each of us two years and one mouth we should probably be using them in that proportion

and just remember when you are listening to someone that does not mean that you cannot disagree with it but when you disagree argue from a reasoned factual objective perspective in this game the science and the objective effect is everything and I say this to my employees my door is open disagree with any decision I make but come with the info come with a research have done your homework because otherwise I'm going to tell you a pot although you can change my mind if you come up with the fact and this is important as you engage and you grow in this industry and you grow in this career you're going to react to a lot of people

who are arrogant who are narcissists who quite frankly can be tens and meows that's just reality that doesn't mean they're not worth listening to that doesn't mean you can't learn from that and I find this often there are people that I work with who are some of the most brilliant technical Minds in the world hands down but man I know when I'm gonna have a meeting with those guys I'm like oh god I've got to deal with this person again but I'm still listening and that's something else I can say as you go forward in your career your personal feelings about the individuals that you deal with don't matter what matters is what can you get from

them in terms of knowledge you can despise someone that doesn't mean he hasn't got something to teach you and our natural human emotion is that the woman will be somebody the more we automatically discount them because you don't want to say the guy that you hated is a genius you want to say he's an idiot so you hate you convince yourself that he's an idiot don't make that mistake I have many times and I'll openly say that as you build your Networks you're building your network on what and people bring and offer you in terms of knowledge here's the other thing about this industry as I said I have no qualifications and I admire everybody here who's

sitting here going through University I admire the Prof who put up with all of you because men I don't think any profit would have survived me I I was a nightmare but your qualifications are a key to a door here's the thing anybody ever watched a TV show called The Originals or any of the any of the Vampire shows right here's a rule about vampires you can get to the door but if you want invited in you ain't getting through that door your qualifications are very much like that to unlock the doorbell but you've now got to convince the guy on the other side to invite you in that comes down to socialization comes down to interaction it comes down

to soft skills and dare I say it it comes down to knowing how to play politics this industry I stand so many attendees who go I hate the politics I don't want to play the politics politics just follow life of my friends and it's a non-music game to play but what is politics it is purely interaction here's something else to consider in the Cyber Security Bank when you interact with a computer what are you doing you're giving a computer input to solicit output when you are hacking a computer you are giving it input to solicit output that the programmer never intended it's as simple as that now let me ask you this when you are having a conversation with

someone what are you doing you're giving them input to solicit output what are you doing when you're socially engineering you're giving an input to solicit output unintended you are having the human brain that's what communication is about input and output and so as you move through and you create these relationships realize the human beings the end of the day are just computers very very fancy computers they work on input and they give output it's really that simple right and I I realize that there are people who are thinking oh my God I'm saying you know he he's implying that you can have an immigrain you definitely can hack the human brain the human brain has got some very

interesting things if you look at fields of study like neuro-linguistic programming and self-hypnosis and NLP combined with self-hypnosis it can make your brain do some really strange things you can hack the human brain but in your career as you're building your relationships in your social networks remember that because as much as you have that input output relationship if you craft the input that you are giving incorrectly you're going to get results that aren't going to work for you watch what you say you know there are times where I stood up at conferences where people have upset me and there's videos where I've gone to the microphone and I haven't rented someone and somebody said everybody you're not

in control I said oh I am because I don't say anything without knowing what I'm saying first I may stand and rant and raid at somebody without a reason and the trick is are they looking at what I Define to do who am I trying to sway is it them is that the other people in the room somebody on a remote video stream every action every word is calculated and that's how you build a network and that might sound strange and manipulative but it's not it's saying that like it is it's expressing something that we all do every day but in a more calculated fashion you see the thing about this industry is as you

go forward you have to calculate your moves when I left school I see a lot of people who come to me and they go and who should I do school I have all these skills and I said they make a plan and then uh I said you've got to plan out and then they said well yeah I've got a plan I said you've got a backup plan and a backup of the backup of the backup of the backup if you've got all of that in place fine if you're gonna have a plan you've got to calculate you've got to think you'll move through and that's what it comes down to as he is studying at a university they

aim to certain skills you know what those skills are never going to be enough sorry Prof but I think you'll admit it you've got to keep learning you've got to go out there and enrich yourself beyond that you know I spent 18 to 20 hours a day if the last 30 years in this industry I typed 160 words a minute with 100 accuracy today because of it I've had to have operations on my wrist for carpal tunnel syndrome because I've lived drink eaten slept it and people know that Pokey people shouldn't have to do that why should I have to do that but I'll tell you why because somewhere out there is going to be a guy like myself who is

going to do it and if you're not putting in that word in that effort the guy who is prepared to put in that work and that effort and is doing so always going to come out on top always because that individual is following a process of lifelong learning a degree a PhD is a starting point and there are many parts right I believe that Academia has a has a big role to play I also happen to believe that there are other paths and I'm going to be proven it those are the paths aren't easy to believe me believe me but it doesn't stop on either part you know I'm 42 now and I'm still working 18 hours a day and I'll probably

be working 18 hours a day till the day I drop dead behind the keyboard I'd woken up with a keyboard imprint on my face because I passed out in front of the keyboard because I was chasing something you have to find that drive and not everybody has to work on you after day I'm not saying that what I am saying is you've got to be driven to keep learning and here's something else to keep in mind in this industry nowadays you can then download tools to scan the network you go and download some exploits to test for exploits you can pull up a computer language and writing completely abstracted Falls without actually knowing how the

computer works without knowing how the exploit Works without knowing how the scanner works you know what everyone else can download that stuff too where's your advantage when you download an exploit testing tool you realize that that's being in the wild probably for the last six months when we wrote something called Smurf long story long convoluted story behind Smurf it was one of the world's most evil DDOS tools it was never meant to be released one of the guys that wrote it decided to take our names off it and release it anyway and unfortunately Master quite PayPal visa and a whole bunch of other things went down 24 hours later and stayed down for quite a while

but when we wrote that we did it because we knew how the network worked and it took months in fact it was yours before everybody adjusted to deal with that tool but the cyber security guys got it six months after Paypal Mastercard Visa etc etc etc had gone down if you're not out there creating your tools you're behind the curve and you can't create the tools by simply downloading something you can't write code in a completely abstracted fashion without understanding that machine to get the best out of it you have to strip away those levels of abstraction and I say this to every student that I ever meet I'm taking you back to school now stripping away your abstraction

layers take python create for Sprints but now I'm going to take you down a whole other path I'm going to show you what C is an assembler and pointers and memory caches are all about I'm going to teach you IP addressing from a binary perspective so that you can calculate the binary mathematics and I'm going to go right back to basics and I said that you're going to hate me for it the next six months of your life you're gonna hate me because I'm going to pull things into your head that you never thought possible and I'm going to work but they work out walk out of there the better people and where did I learn to do all of that

stuff when I started this really tells my age there was no Google there was no Facebook there was no WhatsApp I don't think that Yahoo existed that thing and in fact I saw the birth of the first AP staff in Windows when it came out in Windows 95. because Windows 3.1 didn't really have an IP stack so I got my knowledge by jumping on things like using it which is the old news network on the internet something called Archie something called gopher and also by bending on Doors never taken no for a month if I saw someone that had information that I wanted I harassed them till I got it I didn't care I will phone and phone and

bang on the door and ask and ask and ask it was a Relentless pursuit of knowledge and you want to get to the top of this game and you want to be in this industry that is something that you have to do you cannot rely on somebody else to spoon feed you that information they're going to have to go and get it and you're gonna have to fight for it you're gonna have to fight damn hard for it you know it was interesting when I first started programming it was in passport and we have written in pastel wow and I are now filming video a couple of people have done some Pascal here but I've been chasing people for information

about pascals since I found it on my computer because my older sister had been learning it and by the time I got to start the Paschal course I think age 15. walk into the class and the teacher hands us this textbook which he put in herself and I took this textbook home and a day later I walked into class and I said here's a new textbook she's like what's wrong with the one we'll have I said that is the one you have it's just corrected now the stuff all works she didn't really like that much but I could do it because I thought for the knowledge foreign

one rule that I think that every teacher should follow is that brand code that you can't read and this applies to all of our careers to tell you a story so again at school and I was a bad boy at that time and the teacher had sent us a project and she said the project can be anything that compiles in the Pascal compiler that was it those were the instructions wonderful here's the thing about pesto okay here's the thing about PetSmart program X procedure y assembler heat end now Pascal is all December I think comparison I knew that that teacher could not read a similar she could read passport but I followed her instructions she was stupid enough to run the code

and the code had 3865 code in it which couldn't run on the normal loud machines It could only run on the server which the whole school ran off so she ran it unfortunately for her it hooked the printer interrupt and all the code from the system that printed the reports now flowed through my code and since I didn't like all the Geeks I inverted all marks as they printed them and then mailed up a thousand reports in every ASP student who found themselves getting straight F's I could do it because I knew the underlying system and the Headmaster called me in at the start of the next year and he looks because it was you

and I said what was me he goes you know what it was I looked him I said can you prove it he goes no of course I promise said I guess it wasn't me and the walked out but here's the thing about that I could do it because I knew how the machine worked and so that's my final piece of career advice go out there and dig into the underlay python is great for writing scripture I'll teach you the underlying your exploits you download from the internet please find me the scanner Network blah blah blah not going to teach you how you happen remember happy is about the exploration of knowledge you are not hacking if you are not

seeking knowledge and in the cyber security field that's critical so just to close there's a little bit about my experiences and not the same bit of a way but there are so many lessons along the way that I would say take the lessons figure out what those lessons are you're preparing this talk I said when I said till 4 30 this morning better figure out what are these lessons I get asked all the time will you mention me and I say I don't know what to meant to you because now I'm like yeah and I really started trying to figure out how I got here but be willing to take the lessons learn from them accept that they're not

always easy lessons to learn you're going to get bruised and bloody along the way but it's worth it at the end of the day chasing the knowledge chasing the skills learn to Market yourself if you see somebody and they've got information remember something else be they a king or a queen or a president or a CEO or a CTO just like you they were born Stark naked just like you they will end up as dust they are people they started somewhere they will end somewhere go to them find a way to talk to them and find a way to extract what is in their heads have no fear of tackles in the ietf we have a saying that says we

reject Kings presidents and voting we accept running code and rough consensus titles meaningless get the information never stop pushing never stop chasing and remember all the people around you no matter what the entitle is just another person just another source of information and yeah so that's me and if anybody anybody's got any questions please feel free I hope that you guys got something out of it since yeah happy to take questions