Without Wax: The Quest for Perfection




Pwned: The Information Security Podcast show

Summary: Show Notes: https://justinfimlaid.com/without-wax:-the-quest-for-perfection/<br> <br> <br> <br> Sponsor: https://www.nuharborsecurity.com<br> <br> <br> <br> Contact Me: https://justinfimlaid.com/contact-me/<br> <br> <br> <br> Twitter: @justinfimlaid<br> <br> <br> <br> LinkedIn: https://www.linkedin.com/in/jfimlaid/<br> <br> <br> <br> I had an English<br> Teacher in  High School that was big on<br> Etymology.  If you aren't familiar with<br> Etymology, its history of how certain words came to be. What I like about<br> Etymology is the stories behind certain words. <br> This teacher was one the few teachers I actually liked in High School,<br> and I hated English classes so I guess that says a lot.  One word, and one his lessons has always<br> stuck with me.  That word in<br> Sincere.  Sincere is from the Latin words<br> Sin Cera.  In Latin Sin is “without” and<br> Cera is “wax”.<br> <br> <br> <br> The story of Sin<br> Cera dates back to ancient Roman times. <br> The artistry from that time period was seen in statues and ornate marble<br> pillars.  What was significant about that<br> time period is that artists were appreciated for their perfection.  An apprentice could work for most of their<br> life in a specific craft, trade, or artistry…they’d only do that one<br> thing.  An apprentice might spend years<br> learning how to pick the right type of marble, or they'd spend years learning<br> how to carve a specific type of statue, or spend years learning how to polish a<br> statue.  The best artists were PERFECT.<br> <br> <br> <br> Whats interesting<br> about the best artists from Roman Times and the ones that sculpted Marble is<br> that they embodied perfection in their craft. <br> They would carve perfect sculptures or perfect marble pillars.  <br> <br> <br> <br> For All the other<br> artists trying to make a name for themselves, who cut corners in their trade<br> and lacked experience used wax to cover their mistakes.  They would use wax to fill holes, cracks and<br> mistakes.  The nice thing about wax is it<br> could be smoothed and polished to look like marble.  It could be plastered over and it could be<br> painted over.  For most buyers they could<br> not determine which was artificial Sin Cera or with out wax.  And in some cases they’d never know until the<br> artist was long gone.  <br> <br> <br> <br> Today when we say we<br> are Sincere, it generally means we’re honest. <br> But origins of Sincere also means you are without wax and perfect in<br> your craft.<br> <br> <br> <br> The reason I bring<br> this up, it seems to be relevant as of late. <br> I see more folks and companies trying to capitalize on the Security<br> market.  I understand the push, it’s<br> capitalism in full-swing.  However, I see<br> folks working in the security space who are really confused and are granted<br> trust because of a title, position, or certification.  If you are in Security as a buyer or<br> supplier, whether inside your own company or a third party…and you claim to do<br> security, you need to actually do it. <br> Let me clarify what I mean by that.<br> <br> <br> <br> What I mean by that<br> is you have an obligation to continuously learn because the threat landscape is<br> constantly shifting.  <br> <br> <br> <br> I realize every<br> subject matter expert started with 0 experience.  But what makes someone sincere in their craft<br> isn’t the fact they have a job in the field, it’s the fact they’re a student of<br> the craft and continually strive to be perfect. <br> This means always learning and helping others bridge the security<br> knowledge gap. This means you can’t just dabble in security, it’s not a bullet<br> item on a website or on a resume.  We can<br> do this, but we all have to put in the work and make everyone better.