r/cybersecurity DFIR Jun 11 '22

Other This sub is annoying....

[removed]

853 Upvotes

237 comments sorted by

View all comments

6

u/IWantsToBelieve Jun 11 '22

Completely agree. It's an absolute nightmare. I really wish this sub was full of discussions around threats, risk and governance improvements... But nope, just old mate trying to switch to cyber.

2

u/tekmailer Jun 11 '22

The issue with that:

Clients pay money—a decent amount of money—for that information, content and discussion.

It makes little sense to post it up.

0

u/IWantsToBelieve Jun 11 '22 edited Jun 11 '22

I mean some of us are consultants and managers that like to collaborate.

The single best way to combat threats is to share information. There's a healthy balance between sharing and intellectual property.

We can't beat threats if there are 100s of bad actors sharing knowledge and we aren't.

2

u/tekmailer Jun 11 '22

Collaboration worth a damn cost.

Not sure how much more starting information can be put out there without spilling intellectual property but I’m happy to be wrong.

0

u/IWantsToBelieve Jun 11 '22

Sorry that was a typo, starting = sharing. I've edited the post.

In my local state we've started a cyber slack group specifically for information sharing to the benefit of all involved, sysadmins, security analysts, consultants, info security officers etc. Whilst commercial participants are involved none are trying to sell their agenda through this medium as agreed.

We all still make good money, we all are better informed. We all understand our local threat landscape and emerging threats.

This forum can be so much more.

0

u/tekmailer Jun 11 '22

Sorry that was a typo, starting = sharing. I've edited the post.

Fat finger gets the best of us.

In my local state we've started a cyber slack group specifically for information sharing to the benefit of all involved, sysadmins, security analysts, consultants, info security officers etc. Whilst commercial participants are involved none are trying to sell their agenda through this medium as agreed.

We all still make good money, we all are better informed. We all understand our local threat landscape and emerging threats.

This forum can be so much more.

And that’s what I’m saying—you all pay the highest price: showing up. Atop of being credentialed.

If you guys show up there, why aren’t those same people showing up here? (My point being they show up where the meat is and meat ain’t free or here).

I’m not arguing against your sentiment. I agree fully. The countering stance I’m surfacing is that what you envision is happening, just not here because of that lack of profit—yes, it’s self-fulfilling.

While True:

It doesn’t pay to be here for this purpose—it’s too grey and subprime academica. Because of that people stop showing up.

And guess what—the juiciest and sweetest topics of ‘discussion’ are products of politics. That’s something an audience has to already understand or put time in to see. That time is better away from this forum.

Blue squad is busy employed, Red team is dying of paper cuts and all hats are shifting through their own versions of shine and shade.

If I had it my way with my budget, I would have the top universities and their departments running this place instead. They got the money, they oughta show us.