Thread by @hacks4pancakes

Recognize the early stages of infosec:

“I just read the ‘top 100 passwords’ and they’re super weak!!”
“I turned on external logging and there’s all these brute force attempts!”
“People still use Java!!!”
“SHODAN!”

*Results may vary.
Ask your doctor if infosec is right for you.

Recognize the secondary stages of infosec:
“I stayed up for 30 hrs straight and it was awesome!”
“Is antivirus actually useless?”
“I’m gonna be the best purple teamer!”
“But they promised they’d reimage it last year!”
“Damn, I gotta learn Python..”
“But wasn’t it China?”
“STEGO!”

Recognize the tertiary stages of infosec:
“NEVER MIND, they do need antivirus.”
“So, attribution is hard...”
“Psexec, again?!!”
“Stolen creds, again?!!”
“How is my hard drive full of VM snapshots?”
“I went to a con but I just talked to people...”
“Do I drink too much?”

Recognize the quaternary stages of infosec:
“You know, forget the pen test, let’s just build an asset inventory and network map.”
“I secretly want to skip this con, but I’m speaking about beer.”
“I’m genuinely considering opening a bar in a few years”
“I probably drink too much.”