5 Things Which Vex Me Greatly :) Happy Friday
Few things in this life, let alone this industry, vex me as greatly as do the following:
- Intellectual dishonesty in any form
- Moral corruption and / or unethical behavior
- The blind leading the masses
- Arrogance in the absence of merit
- Paper Dragons
This post is a bit different from those that have previously made their way onto Cassandra Security (perhaps because I’ve been tied up doing other things lately) however, it does thematically speaking, tie into our philosophy as well as much of what I have written in respect to cyber codes of ethics, leadership, values and responsibility. I recognize that for some, this post will be upsetting and to a degree irritating. To that all I can say is – I am simply unapologetic in my desire to serve and seek the truth. Perhaps it is time for those who feel, think and believe that what we do in life echos on in the shadows of eternity to truly begin applying that belief to their daily actions and consider the implications of not doing so. We are measured every day in ways in which we often times are not cognizant of. All of us are and to that end, all of us have a responsibility as professionals, to provide guidance and wisdom when we can and at a minimum strive to ensure that the defenseless are defended when no one else is willing to do so. It is a responsibility and honor for those who dare. Now on to the post!
I believe there is much intellectual dishonesty at work within our industry. I believe that this intellectual dishonesty is cutting off the vitality we so desperately need in so many areas. I believe that it is gumming up the works ultimately making us less and less efficient as professionals and practitioners of our trade. I believe that that an artificial level of complexity has been introduced (and continues to be reinforced due to motive and profitability), forcing debate over ideas and concepts which cause us to lose focus and sight of the big picture. When I consider these debates, the PCI DSS 1.1 & 1.2 respectively come to mind as do HIPAA regulatory legislation, and generic banter about ‘optimization’ spring to mind. Optimization conversations are especially painful in that they are almost always predicated – not on best practices or what is considered to be a standard of good practice within the industry (for the benefit of the users and businesses), but on the integration (yep I said it, integration), of a given vendors suite of products and management tools. Over the years I’ve sat through many conversations on various sides of the table where one would’ve sworn that the platform in question possessed messianic properties. This is simply speaking, transparent and intellectually dishonest and something I have growing disdain and intolerance for. Over the course of my career, I have worked in a number of different capacities within our industry: within the DoD, Consultancies, the Vendor community and back to the Consultancy & Start up communities. Intellectual dishonesty does not exist in my dojo; does it exist in yours?
Moral corruption and unethical behavior. I will simply say this: anyone can be a character but not everyone has character. A man who lacks honor in the small things will demonstrate gaps the size of canyons in large things with respect to moral character and ethics. I believe that character counts and that to be morally corrupt or unethical is to be dishonorable; there is no room for dishonorable behavior in my dojo; is there room in yours?
With respect to the blind leading the masses…this is a touchy one for me as it is something I and my closest peers within the Cassandra family and industry have witnessed and observed over time. The blind leading the masses as though they know or possess some esoteric knowledge the masses do not. There is an old saying that one of my Uncles is fond of quoting “In regione caecorum rex est luscus.” – In the land of the blind the one eyed man is king. This quote is attributed to Desiderius Erasmus in the 15th century. What does it mean? It means that those who can see, regardless of how poorly, have an advantage over those who cannot see at all. But what if they are as blind, if not more so, than those who they lead? I believe many so called “leaders” within our industry, certainly those whose aim is to simply sell a product–treating all products as though they are simply widgets, are only slightly more enlightened (and I would dare say that many lack the vision, expertise and war wounds to truly speak with authority), those whom they call upon. In general, I believe they do not contribute positively to the development of our industry, our profession, and our craft or to the environments or individuals that we seek to protect hourly, daily, weekly, monthly etc. I have no time for the blind leading masses and refuse to allow blindness to exist in my dojo; does it exist in yours?
Arrogance in absence of merit. I suppose this dove tails swimmingly with the previous topic of the blind leading the masses. I question the wisdom of allowing those who lack the benefit of having experience both failure (yes one can benefit, learn and grow from failures), and success in our industry. It has been said there are no atheists in foxholes. I believe that as I’ve sat in foxholes in unappetizing parts of the world with others who held the same beliefs as I either prior to or directly entering said foxhole. I believe that there is no substitute for experience and that expertise is the product of much failure, much victory often times hard fought and gained after much failure, diligent, relentless, tireless effort, passion and the belief in something greater than oneself, which leads to our calling. Humility is something of an awe-inspiring thing to witness especially when demonstrated honestly, without pomp or pretense by someone who (in most circumstances), does not have to do so. A healthy amount of arrogance gained from experience is fine. However, a healthy amount of humility gained over time via the testing of one’s’ mettle is worth far more in my opinion. I do not labor under the delusion that this is a commonly shared or ubiquitously held attitude in our industry, let alone within business however, that is OK. I do not need to as my main concern is mastery of myself in order to serve the greater good and in doing so achieve a state of dangerous humility akin to that of the Samurai. Arrogance in the absence or merit is not allowed in my dojo but humility is; what about yours?
Paper dragons. This is perhaps one of the grossest irritants at work within our industry today. The paper dragon looks impressive; is colorful, majestic and impressive. Perhaps even intimidating in the right light and given the right platform. Nevertheless, take away the right light, the right platform (an artificial platform perhaps), and examine him closely and you will see that his scales are actually paper and that so too are his teeth. Upon further investigation you may find that not only are his scales and teeth false but so too his claws, and breath. At which point you might ask yourself “What purpose does a dragon made of paper serve other than to look good and potentially intimidate from afar?” My assertion is that the answer will be all too obvious. Paper dragons do not exist in my dojo; they are unwelcome and will not be tolerated; what about in yours?
Have a great Friday!
A Warriors Code: Cyber Bushido
Bushido is Japanese for the “Way of the Warrior” It is the code by which the Samurai of Japan lived and died. It was their way of life, similar to the code of Chivalry espoused by medieval Knights of Western Europe. It evolved from the Samurai’s code which stressed the importance of frugality, martial arts mastery, and honor unto death. It’s evolution came as the result of the violent world in which the Samurai found himself for a thousand years. A world fraught with bloodshed and feudal warfare, it encouraged them to embrace the wisdom, peace and knowledge espoused by their their faith; a faith influenced by both Confucianism and Buddhism ultimately culminating in Zen. It was a code which spread through the warrior class, the class of the Samurai, quickly. It became ubiquitous throughout their ranks and was to be followed and embraced without question. To follow the code was to adhere to a lifestyle not suited for all, but for those who dared, it was a way of balance which lead to harmony and freedom. It required discipline, loyalty to one’s master, filial piety, and reverence to the Emperor of Japan. Additionally, it called for the Samurai to protect and show compassion to those who could not protect themselves (often those of a lower social station), while in all things, maintaining ones name; ones honor and reputation. Kato Kiyomasa, a Warlord of the Sengoku period said that if a man did not study the ways of Bushido daily, it would be difficult for that man to die a brave and manly death. Essentially, Kiyomasa advocated that all Samurai should engrave the business of the warrior (Bushido), in his mind well so that when called upon to act in offense or defense, that man would be prepared whatever came. Severe penalties were paid for failing to adhere to the code. Disgrace or dishonor was intolerable. So intolerable in fact that seppuku or ritual suicide was established and accepted as being the only way a Samurai who had been disgraced or dishonored could, regain his honor while removing the blemish from his name and the name of his family.
Bushido was comprised of seven primary tenets with, at times, three additional ones added depending on the time period and circumstances. They were as follows:
- Rectitude (義 gi )
- Courage (勇 yuu )
- Benevolence (仁 jin)
- Respect (礼 rei)
- Honesty (誠 makoto or 信 shin)
- Honor (誉 yo)
- Loyalty (忠 chuu)
- Filial piety (孝 kō)
- Wisdom (智 chi)
- Care for the Aged (悌 tei)
To the Samurai these were not merely empty words, used trivially carrying no weight in their meaning. These words were paramount to their existence and subsequently aided in defining who they were, what they believed and what separated them from those with no honor. Honor was everything and pride was to be mastered in the struggle to maintain ones honor. The Samurai were not without knowledge of war craft, tactics and strategy. This knowledge coupled with their adherence to their code, enabled them to remain centered and balanced. As such, they were prepared for both the conventional and unconventional encounted in battle as well as in their day to day existences. Furthermore, their comprehension of war craft and mastery of martial arts (their skills if you will), enabled them to contend with all manner of enemies (seen and unseen — mercenaries, assassins, shin-obi).
In our discipline there are paths which lead to many destinations; each one containing challenges and obstacles all their own. Our world, like that of the Samurai is a complex place. There are those who wish to do harm and subsequently pose threats to the established norm with no concern for others, especially those who cannot defend themselves. These threats vary, some being physical, some being “cyber” — all posing risks to our world, threatening imbalance and disorder. As a result, I feel that amongst our community, there needs to arise a warriors code of our own; a “Cyber Bushido” which sees those of us whose calling it is to protect those who cannot protect themselves while serving a greater good be defined. Though it may not need to be a carbon copy of the Bushido of the Samurai, it could benefit from the adoption of some elements considered essential to that code in addition to the tenets encouraged and embraced by the Samurai.
Our challenges are not presented at the end of a katana, nor are they necessarily quelled by a vigorous, honorable death in battler. However in some respects they are more complex than even the wisest of the Samurai could have imagined. Fundamental to our struggle is the code and our belief in its importance and unrepentant embracing of it, like the Samurai and their view of Bushido. Our enemies are both foreign and domestic (as research has demonstrated), and in many cases their reasoning and rationale for their actions varies but their dedication to their ends does not. With this in mind I challenge those who believe in that which is virtuous and good; that which is honorable and noble; that which is for the greater good to consider the concept of a cyber warriors code, our own Bushido.
