It's 2022. Data breaches are in the news everywhere. "CYBERSECURITY" is a hot topic, especially in Australia after the Optus and Medicare shitstorms. Despite this, we have companies like AGL outsourcing certain jobs to companies that are training people to click on bitly links sent via SMS. AGL have not indicated that they're using this vendor, nor is there any correspondence from AGL directly that they would be doing any kind of work. So out of the blue, messages like this stink of spam.

"We care about your security".

Conditions at the crag would be absolutely 😗​👌​today ... it is making it a struggle to stare at a screen.

Here's another couple of snaps of my local. #rockclimbing #climbing

Prior to moving into offensive security, I spent my time in dev and had enormous fun handling the tough stuff. I loved the hard challenges that came with product dev, and I had a thrill trying to fix high priority issues. Production bugs in particular I got a kick out of. When folks were running away from the "fire" I enjoyed walking towards it. This isn't about being a hero it was about being in on the challenge. It was great fun. Solving the problem would give me a real rush.

Right now, I think of the blue teams involved in trying to stem the flow from places like Medibank. They're pulling all-nighters, all week, to get things locked down and to try to stop things getting worse. They're fighting to get the bad actors out and keep them out. They're trying to restore normality for the business, but more importantly trying to protect the end-user who has had their personal information breached.

These people are the heroes. We don't see them, and most people don't even know they're there. But they're working their asses off to fix this shit.

I don't often wish I was in blue. Right now I do wish I was one of them. Props to you all and the effort you're putting in!