[00:35.260 --> 00:36.260]  Okay, so...
[00:36.260 --> 00:36.760]  Good morning!
[00:37.610 --> 00:38.200]  I'm not
[00:48.820 --> 00:52.200]  Emmanuel Goldstein, although I have played him on television a few times.
[00:54.170 --> 00:56.640]  Emmanuel is asleep right now.
[00:56.800 --> 01:05.120]  The pro that he is, he was up all night putting the final touches on Freedom Downtime, which will of course be on here tonight at 7 o'clock.
[01:05.220 --> 01:07.540]  I am looking so forward to that movie, it's going to be so cool.
[01:07.720 --> 01:16.530]  He's spent the last two years of his life roaming around the country, the world, the universe, making interviews and checking out situations that you guys will all be informed about later tonight.
[01:17.620 --> 01:21.590]  My name is Mojo, if you see me on any questions you can ask me, I'm helping to run this thing this weekend.
[01:22.160 --> 01:26.720]  I guess the only real request I have is please respect the hotel.
[01:27.120 --> 01:29.420]  That especially means the payphones, okay?
[01:30.980 --> 01:33.400]  Leave the little payphones all to themselves, because you know what?
[01:33.520 --> 01:37.280]  It's hard enough to get a hotel in the middle of New York City for you guys to run this thing.
[01:37.280 --> 01:45.900]  As long as the hotel staff is happy and doesn't see anything freaky going on, no pun intended, then I'm sure they'll be happy to invite us back for future comments.
[01:46.500 --> 01:48.980]  So, I guess that's about it.
[01:49.100 --> 01:50.580]  How many of you are the first time in New York City?
[01:51.680 --> 01:52.460]  Quite a few, alright.
[01:52.580 --> 01:53.380]  Well, do yourselves a favor.
[01:53.600 --> 01:56.650]  Don't spend the whole weekend in the hotel, okay?
[01:57.210 --> 01:58.080]  See a few other sites.
[01:58.260 --> 01:58.860]  This is New York City.
[01:58.880 --> 02:02.280]  You can just wander a few blocks from the hotel and you'll find all kinds of cool things.
[02:02.280 --> 02:05.380]  There's also a lot of good electronic stores, but do yourself a favor.
[02:05.720 --> 02:08.440]  Don't pay any more than half of what they tell you it costs.
[02:08.740 --> 02:10.380]  That's your best pool here in New York.
[02:10.940 --> 02:13.900]  Alright, we're going to get things started with Scott Blake from Racer.
[02:14.060 --> 02:16.660]  He's going to talk to you all about the pros and cons of working for the man.
[02:16.880 --> 02:18.040]  Let's have a nice warm welcome for Scott.
[02:18.220 --> 02:18.620]  I'll see you later.
[02:24.870 --> 02:25.230]  Hi.
[02:25.790 --> 02:27.070]  Is the sound level good?
[02:27.190 --> 02:27.850]  Everybody can hear me?
[02:27.850 --> 02:28.450]  Can you hear me turning back?
[02:29.050 --> 02:29.110]  Yeah?
[02:29.470 --> 02:29.950]  Okay.
[02:30.550 --> 02:31.030]  Good.
[02:31.170 --> 02:35.370]  We're going to try to avoid feedback by staying away from the speakers.
[02:36.150 --> 02:43.170]  So, bear with me slightly here because the laptop is not happy with the projector and having both on at the same time.
[02:43.550 --> 02:46.810]  So, I can't see what you can see, so I have to turn around.
[02:54.190 --> 02:57.810]  So, this is just a quick outline of what we're going to talk about.
[02:57.930 --> 03:00.090]  I like to keep these things very informal.
[03:00.490 --> 03:02.890]  So, if you have any questions, put up your hand.
[03:03.250 --> 03:06.610]  And I'll be happy to interrupt and that's cool.
[03:06.910 --> 03:08.830]  There will be questions and answers at the end as well.
[03:09.470 --> 03:10.570]  Presumably we have enough time.
[03:10.850 --> 03:12.610]  What time do I have to finish?
[03:12.610 --> 03:17.250]  Do I have to finish at 11 or a little before?
[03:17.630 --> 03:18.050]  11.
[03:18.450 --> 03:18.690]  Okay.
[03:20.330 --> 03:21.470]  Okay, that's a bad spot.
[03:21.750 --> 03:21.850]  Okay.
[03:23.670 --> 03:25.950]  So, the outline is who am I?
[03:26.570 --> 03:27.490]  Who is the man?
[03:28.270 --> 03:30.390]  For those of you who don't know, which is probably a few.
[03:31.350 --> 03:34.190]  The pros of selling out, the cons of selling out, and living with the man.
[03:34.610 --> 03:42.530]  Not in your own apartment or house or whatever per se, but that sort of ongoing relationship that you may wish to pursue and then we'll wrap it up.
[03:42.730 --> 03:47.130]  So, this is me, Scott Blake, as you saw and as I just so graciously introduced.
[03:48.050 --> 03:54.990]  I'm the manager of the Razor Team, which is a security research team for Bindu Corporation, which is based in Houston.
[03:55.930 --> 04:07.090]  And it's a team of folks, probably not all that unlike yourselves, who write stuff for a living, find new and interesting ways to subvert and create security.
[04:07.630 --> 04:08.010]  Both.
[04:08.290 --> 04:11.410]  I'm also a sociologist, using that term somewhat loosely.
[04:12.610 --> 04:18.330]  I did quite a bit of graduate work in that field and didn't like...
[04:19.150 --> 04:21.930]  I don't have a PhD, but I do have a master's degree.
[04:22.090 --> 04:24.130]  So, it sort of moves as well.
[04:24.810 --> 04:27.010]  And I'm an experienced security consultant.
[04:27.230 --> 04:28.870]  I've been in the field for quite a few years now.
[04:29.670 --> 04:30.550]  I've done IT management.
[04:33.470 --> 04:36.570]  And I'm an employer of hackers on the Razor Team.
[04:36.810 --> 04:39.210]  So, that's my qualifications, if you will.
[04:40.990 --> 04:42.510]  So, who is the man?
[04:43.770 --> 04:48.170]  Those of you who have a couple of gray hairs probably already know who the man is.
[04:48.190 --> 04:50.110]  Some of you who don't have any gray hairs may not.
[04:50.370 --> 04:54.050]  But it's a term for the establishment, basically.
[04:54.430 --> 04:56.630]  It's corporate America, the government.
[04:57.710 --> 05:02.210]  Universities are an interesting question, which is why I have the question mark on there.
[05:02.210 --> 05:13.030]  Some people don't consider universities to be part of the establishment, although that's a fairly debatable point.
[05:13.530 --> 05:20.230]  When you start thinking about where a lot of the money comes from and who they're sort of beholden to.
[05:20.470 --> 05:28.990]  If you spent any time in academia doing graduate work, for example, you start to get a sense that it really is part of the establishment.
[05:28.990 --> 05:32.350]  So, they may try to tell you otherwise, but don't believe them.
[05:32.790 --> 05:34.050]  You're still working for the man.
[05:34.190 --> 05:35.750]  So, it's pretty much everybody.
[05:36.470 --> 05:42.690]  We can make a couple of exceptions if you happen to be lucky enough to be a full-time employee of, say, 2600.
[05:43.870 --> 05:48.170]  Possibly something like the EFF, the Electronic Frontier Foundation.
[05:48.770 --> 05:53.290]  One of those places that's really trying to do good work and doesn't have the profit motive involved.
[05:53.530 --> 05:55.510]  You might be able to make a case for it.
[05:55.510 --> 05:59.370]  But even in those cases, you have to play the game to a certain extent.
[05:59.610 --> 06:04.870]  So, basically, working for the man means collecting a paycheck, regardless of who you're getting in front.
[06:07.510 --> 06:09.970]  So, which man do you want to own your soul?
[06:10.790 --> 06:12.290]  Because that's essentially what you're doing.
[06:12.830 --> 06:16.750]  When you go to work for Perfect America, you are selling your soul.
[06:17.250 --> 06:19.070]  For some limited period of time.
[06:19.590 --> 06:21.950]  Preferably for some large amount of marine information.
[06:23.130 --> 06:25.310]  But not always, depending on the circumstances.
[06:26.110 --> 06:28.650]  So, you want to think about what kind of work that you want to be doing.
[06:29.010 --> 06:30.530]  I just put up a couple of examples here.
[06:30.690 --> 06:31.510]  There are plenty more.
[06:31.850 --> 06:35.110]  These are the kinds of things that you'll be most likely to be attracted to.
[06:38.370 --> 06:40.030]  Consulting is big right now.
[06:40.470 --> 06:43.290]  There are two startups that probably a lot of you referred of.
[06:44.150 --> 06:46.770]  AtStake, which is sort of the L0pht.
[06:47.230 --> 06:48.690]  There are some representatives around here.
[06:48.790 --> 06:49.950]  I don't know if there's anybody in the audience.
[06:51.390 --> 06:52.570]  Pop was floating around earlier.
[06:54.690 --> 06:55.930]  But that's selling out.
[06:56.630 --> 06:57.750]  That's working for the man.
[06:58.190 --> 07:00.510]  And consulting is a growing area.
[07:00.670 --> 07:06.290]  There was a forest or research report a couple of years ago that said it was going to be the next big thing.
[07:06.290 --> 07:07.810]  So, everybody wants to get into that now.
[07:08.350 --> 07:09.230]  I don't know if you guys are familiar.
[07:09.410 --> 07:10.450]  This is the market analyst.
[07:10.670 --> 07:15.390]  If you haven't been working for a little while, you may not be aware of market analysts.
[07:15.530 --> 07:16.990]  It's a really interesting thing.
[07:18.590 --> 07:20.670]  Forrester, IDG, Gartner Group.
[07:20.770 --> 07:21.610]  There's a whole bunch of them.
[07:21.670 --> 07:23.050]  And they're very highly respected.
[07:23.230 --> 07:24.930]  They get quoted all the time in all the press.
[07:25.410 --> 07:28.350]  And they say, you know, what's going to happen next?
[07:28.710 --> 07:29.910]  And everybody believes them.
[07:29.990 --> 07:31.610]  That's the funny part, really, about it.
[07:31.710 --> 07:33.990]  Is that all they have to do is say something.
[07:33.990 --> 07:36.230]  And everybody goes, oh, that must be what?
[07:36.350 --> 07:37.030]  That must be it.
[07:37.630 --> 07:41.550]  And so, as I said a couple of years ago, they got together and said that there's going to be...
[07:41.550 --> 07:44.010]  Security consulting is going to be a big market in the next few years.
[07:44.110 --> 07:46.530]  And so, now everybody wants to jump into that.
[07:46.630 --> 07:52.910]  The other one that's sucking up a lot of folks not unlike yourselves is a company called Gartent.
[07:53.910 --> 07:55.970]  Which is another security consulting company.
[07:56.890 --> 07:58.890]  Probably there are a few employees in the audience.
[07:59.070 --> 08:00.390]  No one I recognize at the moment.
[08:00.650 --> 08:04.470]  But it's sort of an interesting thing, too.
[08:04.590 --> 08:07.810]  Because AtStake was really playing up the hacker angle.
[08:08.330 --> 08:09.790]  Having merged with the L0pht and everything.
[08:09.790 --> 08:12.730]  We wanted to be able to exploit some of that brand.
[08:12.910 --> 08:14.830]  Whereas Gartent is really downplaying that.
[08:15.330 --> 08:20.510]  Although I think you'll find, if you start talking to some of the people who work in those places, is that they're the same people.
[08:20.610 --> 08:21.590]  They're all friends with each other.
[08:21.810 --> 08:26.990]  And in fact, one of the managing directors of Gartent is...
[08:26.990 --> 08:31.430]  Or was until extremely recently, engaged as somebody who happened to work AtStake.
[08:31.590 --> 08:35.990]  So, it's the same thing, even though it doesn't always appear that way on the surface.
[08:36.290 --> 08:36.990]  It's all the man.
[08:38.350 --> 08:41.970]  Research is another area that's a possibility for employment.
[08:42.330 --> 08:47.890]  And I'll talk more about what sort of the pros and cons of each of these areas as we go along.
[08:48.790 --> 08:51.290]  My group, for example, is a research organization.
[08:51.470 --> 08:54.290]  If you're interested in research, talk to me afterwards.
[08:55.270 --> 08:56.810]  But there are other places as well.
[08:56.950 --> 08:58.650]  There are a couple of private organizations.
[08:59.050 --> 09:03.230]  AtStake, the L0pht Labs does do tour research as well.
[09:04.470 --> 09:06.070]  And there's also NAI.
[09:06.210 --> 09:10.390]  Network Associates has a research lab that they acquired through TIS.
[09:11.770 --> 09:14.110]  But there isn't a lot of that in private industry.
[09:14.110 --> 09:17.410]  Mostly you're going to be ending up more in the academic area.
[09:17.890 --> 09:20.570]  If that's what you're going to be interested in doing.
[09:20.730 --> 09:25.170]  The pure play kind of not feeding products, not doing consulting.
[09:25.430 --> 09:28.150]  But just research, basic research in the field.
[09:29.590 --> 09:31.310]  IT staff is a big one.
[09:31.510 --> 09:36.650]  And probably there are more than a few people in the audience here who are essentially IT staff.
[09:36.650 --> 09:42.090]  Either with explicit security responsibilities like you're the security guy on the IT staff.
[09:42.350 --> 09:48.190]  Or, much more likely, it's just one or more of the job responsibilities that you may have.
[09:48.550 --> 09:51.590]  You're ostensibly a system administrator, a network engineer.
[09:52.470 --> 09:53.370]  You name it.
[09:53.530 --> 09:55.930]  There are a lot of different job titles that go along in that field.
[09:57.310 --> 10:00.150]  But everybody always says, oh, and it needs to be secure as well.
[10:01.130 --> 10:02.490]  So we want to build this great website.
[10:02.670 --> 10:03.530]  We want to do e-commerce.
[10:03.610 --> 10:04.610]  We want to have all this stuff.
[10:04.750 --> 10:06.330]  We want to get all this data moving back and forth.
[10:06.350 --> 10:07.470]  Oh, and it has to be secure.
[10:08.690 --> 10:10.170]  It's always sort of tacked on to the end.
[10:10.210 --> 10:11.290]  Oh, it has to be secure.
[10:12.010 --> 10:17.290]  And so everybody sort of runs around and pulls their hair out for a little while trying to figure out exactly how we're going to do that in a lot of cases.
[10:17.290 --> 10:18.870]  And that's a different topic.
[10:19.610 --> 10:20.630]  Maybe next year.
[10:23.030 --> 10:30.470]  Development is one area that there aren't a lot of folks who would wear the hacker moniker with pride involved in.
[10:30.530 --> 10:31.390]  But there are certainly a few.
[10:32.390 --> 10:35.650]  And you're mostly talking about the security companies at this point.
[10:35.730 --> 10:42.830]  But also consulting places where you're going to be doing a lot of sort of project-based application development.
[10:43.470 --> 10:50.130]  And there may actually be, in some cases, an actual security thing to it as opposed to being, oh, it has to be secure as well.
[10:50.830 --> 10:57.230]  And that's going to be increasingly the case with e-commerce and especially with business-to-business or B2B stuff.
[10:57.470 --> 11:03.170]  As people are much more sensitive about that when there's real money involved as opposed to just collecting people's credit cards.
[11:03.730 --> 11:04.770]  Interesting side note.
[11:04.950 --> 11:12.110]  Does anyone know off the top of their head what your liability is for fraudulent use of your credit card?
[11:12.110 --> 11:12.790]  50 bucks.
[11:12.990 --> 11:13.730]  50 bucks.
[11:13.730 --> 11:13.830]  50 bucks.
[11:14.030 --> 11:14.530]  Exactly right.
[11:15.090 --> 11:19.750]  So, I don't know about you, but I'm perfectly happy to use my credit card on the internet.
[11:19.890 --> 11:21.950]  And I don't really care if anybody picks it up.
[11:22.530 --> 11:25.750]  Why do I care if the maximum liability is 50%?
[11:25.950 --> 11:31.550]  And in practice, what that means is it's only 50% if the credit card company can't actually show that it was fraudulent.
[11:31.550 --> 11:41.330]  So, if I actually went out and bought something that was not necessarily tangible and wrote a letter to my credit card company saying, Hey, I didn't buy this.
[11:41.430 --> 11:42.750]  This wasn't me.
[11:43.110 --> 11:44.170]  Fraudulent use of the credit card.
[11:45.190 --> 11:47.470]  They will, chances are, charge me 50 bucks for it.
[11:48.190 --> 11:50.130]  Which is, in turn, fraudulent use of the credit card.
[11:50.130 --> 11:56.330]  But that's neither here nor there because the credit card companies don't really care because they can write it off.
[11:57.050 --> 12:05.930]  As long as it's kept to a reasonable level and isn't having a really major detrimental effect on the bottom line, it's just a tax rate off of the credit card companies too.
[12:06.210 --> 12:12.210]  This is why, for those of you who didn't already know this, credit card security is so incredibly bad in all ways.
[12:12.670 --> 12:13.650]  Forget about the internet.
[12:13.910 --> 12:18.810]  You know, go to a restaurant and charge your dinner and the receipt goes out to who knows where.
[12:20.210 --> 12:22.330]  So, dumpster diving, we're all familiar with it.
[12:22.390 --> 12:24.490]  It's sort of passe now, I guess, to do that kind of thing.
[12:24.630 --> 12:26.070]  But it's still extremely effective.
[12:28.010 --> 12:30.710]  And that's, you know, nobody cares.
[12:30.790 --> 12:31.950]  Tax rate off for the company.
[12:32.690 --> 12:34.530]  Very limited liability for the consumer.
[12:34.890 --> 12:37.150]  So, I'm sidelined there.
[12:37.530 --> 12:43.670]  But there are other possibilities also for different faces of the man that you may choose to work for.
[12:44.490 --> 12:51.110]  That will have different specifics to them, but we're not going to really cover those too much today.
[12:51.710 --> 12:52.850]  So, the pros of selling out.
[12:53.890 --> 12:55.150]  You've decided what you want to do.
[12:55.230 --> 12:56.250]  You want to go do research.
[12:56.250 --> 12:57.450]  You want to do consulting.
[12:57.950 --> 12:59.710]  You want to go work in an IT staff someplace.
[13:00.290 --> 13:01.530]  They're going to pay you money.
[13:01.950 --> 13:04.250]  That's the whole point of the thing in the first place, right?
[13:06.130 --> 13:07.090]  As well it should be.
[13:07.650 --> 13:09.810]  Because you're not basically going to get a heck of a lot else.
[13:10.270 --> 13:21.430]  There are going to be a few other pros that we're going to hit on, but compared to the money, and in some cases the stock options if you happen to get lucky, although, I don't know if you all know, 9 out of 10 startups fail.
[13:21.550 --> 13:22.730]  It has nothing to do with the internet.
[13:23.250 --> 13:24.350]  That is the statistic.
[13:24.610 --> 13:31.310]  So, you have roughly a 1 in 10 chance of making any money off your stock options, much less making a killing out of them.
[13:32.970 --> 13:38.970]  I did an internet security startup a couple of years ago and was extremely lucky to basically get a car out of the deal.
[13:38.970 --> 13:42.110]  Because basically the new car was about the payoff like that.
[13:42.230 --> 13:46.670]  I was hoping for like a house and a boat, but the car, not bad.
[13:46.810 --> 13:47.650]  Good consolation prize.
[13:47.990 --> 13:50.430]  So stock options are definitely something that you need to consider.
[13:50.650 --> 13:54.910]  And the terms of the agreements as well, we'll come to that in a little bit.
[13:56.310 --> 13:59.690]  Benefits like health insurance, that's always convenient.
[14:00.530 --> 14:06.810]  As some of you grow up a little bit and start to maybe get married, have kids, perish the thought I know.
[14:07.810 --> 14:11.850]  But health insurance will become extremely important later on in life, I can assure you that.
[14:13.390 --> 14:14.950]  Business cards, they're kind of cool.
[14:15.170 --> 14:22.670]  They're, you know, especially if you have a really liberal company, you can get cool job titles on them or additional logos.
[14:22.930 --> 14:23.590]  And this is mine.
[14:23.890 --> 14:29.150]  We have the BindView logo at the top, which you can't see, but there's also the Razor logo underneath, right?
[14:29.330 --> 14:31.230]  So we have them both and we're special.
[14:31.370 --> 14:35.310]  Nobody else has the subdivision logo on their business cards, right?
[14:35.390 --> 14:36.770]  So it's a mark of pride.
[14:37.030 --> 14:48.230]  And even better, you can sometimes get a cool job title on your business cards, which can be a real mark of pride when you're going to something like H2K and hand them out as you're networking and trying to meet other people.
[14:48.690 --> 14:51.210]  You can put cool things on there like Super Genius.
[14:51.430 --> 14:52.790]  I have a friend who has that on there.
[14:54.430 --> 14:57.470]  Another one that's a little bit more subtle, and we'll see who laughs at this one.
[14:57.810 --> 14:58.750]  Occam Theorist.
[15:00.070 --> 15:01.390]  Okay, got a couple of those.
[15:01.510 --> 15:02.150]  A couple of people get it.
[15:02.810 --> 15:04.170]  Occam's Razor, right?
[15:04.530 --> 15:05.390]  The Razor Team.
[15:06.130 --> 15:06.750]  Okay, good.
[15:07.010 --> 15:07.350]  All right, good.
[15:08.470 --> 15:11.590]  So business cards, you laugh, but it's an important benefit.
[15:13.250 --> 15:15.470]  Perquisites are less common in this country.
[15:16.390 --> 15:18.750]  I think there are a few people from other places around.
[15:19.610 --> 15:28.310]  The purposes can be things like, you know, use of the company VIP box when you go to see the game, which you can get in certain circumstances.
[15:28.590 --> 15:35.250]  Other countries it's actually quite common to get a car for especially senior level technical staff and managers.
[15:36.070 --> 15:36.270]  Yeah?
[15:37.230 --> 15:42.210]  I do IT and what they gave me was a diner's club card with no limit.
[15:42.210 --> 15:43.190]  Hey, there you go.
[15:43.250 --> 15:44.590]  Diners club card with no limit.
[15:44.770 --> 15:45.450]  Good benefit there.
[15:46.790 --> 15:48.110]  You're buying dinner tonight.
[15:52.010 --> 15:55.490]  In a lot of places, you get like servants.
[15:55.870 --> 15:57.750]  I actually started this recently.
[15:58.070 --> 16:07.890]  For like top-level managers in India, it's a common part of the compensation package to get like a maid for the house and the groundskeeper and stuff like that.
[16:08.050 --> 16:08.690]  That's cool.
[16:08.830 --> 16:11.510]  I want one of those, but not likely in this country.
[16:11.730 --> 16:12.630]  Travel and excitement.
[16:13.150 --> 16:13.670]  Very important.
[16:14.090 --> 16:18.110]  Travel to things like this convention or other conventions of its kind.
[16:18.430 --> 16:20.290]  It's all professional development.
[16:20.450 --> 16:21.150]  Remember that phrase.
[16:21.250 --> 16:22.110]  Professional development.
[16:22.210 --> 16:25.590]  It's an important thing to ask about if you're considering selling your soul.
[16:27.370 --> 16:29.710]  More pros could be very interesting work.
[16:30.570 --> 16:31.010]  Happens.
[16:32.790 --> 16:35.870]  The work that my group does is extremely interesting.
[16:36.110 --> 16:38.110]  I had a lot of really good stuff that I've been consulting.
[16:39.090 --> 16:45.030]  IT stuff tends to be not so interesting, but sometimes it can be depending on the environment that you're in.
[16:45.450 --> 16:47.630]  I'm going to remember all the factors to talk about this briefly.
[16:48.150 --> 16:49.570]  Root passwords on cool boxes.
[16:51.870 --> 16:53.190]  I don't even go into that one.
[16:53.190 --> 16:55.790]  But toys, like BFRs.
[16:55.850 --> 16:57.230]  Does everyone know what BFR is?
[16:57.270 --> 16:58.890]  That's a big router.
[17:00.990 --> 17:02.170]  The F is silent.
[17:02.330 --> 17:04.430]  I stole that joke by way from Vint Cerf.
[17:06.330 --> 17:10.330]  He gave a talk at RSA this past year on the future of the internet.
[17:10.470 --> 17:13.410]  Vint Cerf, for those of you who don't know, is one of the guys who invented IP.
[17:14.350 --> 17:17.390]  Now a vice president of something or other at NCI WorldCom.
[17:18.170 --> 17:19.550]  And an all-around cool guy.
[17:19.750 --> 17:21.030]  It's a good joke to steal.
[17:21.110 --> 17:22.030]  It could be fun.
[17:23.810 --> 17:25.710]  Not likely, but it's possible.
[17:26.410 --> 17:29.530]  Fun does happen, especially with your colleagues.
[17:30.370 --> 17:33.210]  There's a couple of people who are of like mind.
[17:33.790 --> 17:35.310]  You can have these sorts of things.
[17:35.450 --> 17:44.770]  I know a number of places that have after-hours Quake or Doom or whatever on their networks.
[17:44.770 --> 17:52.110]  So Friday night, 5.30, everybody fires up Doom or Quake or whatever the latest thing is, Descent or what have you.
[17:52.530 --> 17:57.990]  And they all play on these gigabit networks that aren't doing anything else, so why not just play a game on them?
[17:58.230 --> 17:59.450]  And that could be very cool.
[18:04.100 --> 18:05.800]  Some areas of specific pros.
[18:06.020 --> 18:07.760]  Research, very low pressure.
[18:08.920 --> 18:12.980]  Your goals are going to be things like, okay, let's crank out a paper this year.
[18:14.680 --> 18:15.560]  We can do that.
[18:15.680 --> 18:19.500]  Now maybe high pressure environment might be like, two papers this year.
[18:21.400 --> 18:23.060]  Go off and do something cool.
[18:23.380 --> 18:24.220]  Make us all proud.
[18:25.320 --> 18:27.140]  That's the kind of environment that a lot of them.
[18:27.240 --> 18:29.440]  You have often this very high degree of freedom.
[18:30.580 --> 18:44.100]  Places that fund research are generally doing it for the basic research aspect that will lead to something.
[18:44.560 --> 18:47.800]  Bell Labs and Bell Corp used to do this kind of stuff.
[18:48.200 --> 18:53.820]  You got to be a fellow at one of these places and they give you a big budget and say, have fun.
[18:54.280 --> 18:55.720]  Let us know what you come out with.
[18:55.940 --> 19:01.700]  And the idea here is that they're betting that something is going to come out of this that's going to have a big commercial application.
[19:02.220 --> 19:03.060]  And it happens.
[19:03.180 --> 19:03.940]  It happens quite frequently.
[19:03.940 --> 19:05.340]  That's where a lot of innovations come from.
[19:06.960 --> 19:12.660]  One note on research, however, is that not all research is the basic research that you're going to find in academia.
[19:13.540 --> 19:15.660]  Some places this is essentially consulting.
[19:16.320 --> 19:19.940]  Where you're doing research, but for a client.
[19:20.720 --> 19:22.740]  Often the government in most cases.
[19:23.420 --> 19:25.640]  And that's a very different story.
[19:25.880 --> 19:27.480]  That's consulting.
[19:28.280 --> 19:29.800]  Without the travel usually.
[19:30.900 --> 19:32.920]  Which is what you'll note here is one of the pros.
[19:33.720 --> 19:34.520]  Change of scenery.
[19:34.520 --> 19:35.680]  Yeah, it's one of the pros.
[19:36.060 --> 19:39.140]  And that one goes away if you're doing consulting research.
[19:39.400 --> 19:41.920]  But you can do some very interesting stuff.
[19:42.380 --> 19:44.060]  So, let's keep moving here.
[19:44.400 --> 19:45.400]  Operations and IT.
[19:45.680 --> 19:47.360]  Lots of data and lots of toys.
[19:47.580 --> 19:48.480]  Toys we sort of mentioned.
[19:48.660 --> 19:50.120]  Things like big routers.
[19:50.980 --> 19:55.620]  And data in the form of, like, firewall logs.
[19:55.740 --> 19:56.620]  IDS logs.
[19:56.820 --> 19:57.740]  What's going on?
[19:57.740 --> 19:59.920]  If you're responsible for operational security.
[20:00.100 --> 20:02.940]  Or part of a team that's responsible for operational security.
[20:03.640 --> 20:05.060]  You get to, like, investigate.
[20:05.340 --> 20:06.480]  And do the forensic stuff.
[20:06.720 --> 20:07.740]  And say, hey, somebody broke in.
[20:07.860 --> 20:09.420]  And figure out whether or not somebody broke in.
[20:10.060 --> 20:11.440]  And try to track them down.
[20:11.820 --> 20:13.020]  And do all that kind of stuff.
[20:13.160 --> 20:14.260]  Which is entertaining.
[20:15.560 --> 20:18.080]  From an intellectual challenge point of view.
[20:18.880 --> 20:19.960]  Can be very cool.
[20:20.060 --> 20:22.000]  That's what I mean by lots of data.
[20:22.140 --> 20:22.960]  There are things happening.
[20:23.600 --> 20:25.140]  And you're sort of involved in that.
[20:25.140 --> 20:26.820]  It's especially true at larger companies.
[20:27.620 --> 20:30.700]  The bigger the company, the more data you're going to get.
[20:30.860 --> 20:32.960]  And small companies, it tends to not be nearly as much fun.
[20:33.220 --> 20:34.480]  In that respect, anyway.
[20:35.580 --> 20:36.020]  Consulting.
[20:36.340 --> 20:37.240]  The change of scenery.
[20:37.520 --> 20:38.200]  If you're into that.
[20:38.900 --> 20:40.540]  Lots of travel in a lot of cases.
[20:41.320 --> 20:44.100]  Not necessarily if you're doing more researching kind of things.
[20:44.620 --> 20:46.800]  But can be very high travel.
[20:46.920 --> 20:49.320]  Which is also one of the cons I should probably mention.
[20:50.740 --> 20:52.140]  Travel sounds really cool.
[20:52.280 --> 20:54.760]  When you first start thinking about, wow, we're going to go to San Francisco.
[20:54.760 --> 20:55.720]  We're going to go to Chicago.
[20:55.940 --> 20:56.520]  And we're going to go to London.
[20:56.560 --> 20:57.080]  And Paris.
[20:57.340 --> 20:58.080]  And Tokyo.
[20:58.480 --> 20:59.240]  And Singapore.
[20:59.540 --> 21:00.240]  And it's going to be great.
[21:00.780 --> 21:03.900]  Until you wake up one day and realize that you haven't been home in two months.
[21:04.760 --> 21:07.440]  And your cat doesn't recognize you when you walk in the door.
[21:07.560 --> 21:08.900]  And your dog starts barking at you.
[21:09.520 --> 21:12.800]  And as you, again, get older, that will become, in some cases.
[21:13.260 --> 21:17.600]  That will, again, become more important as things like your wife has changed the locks on the door.
[21:18.560 --> 21:19.420]  For example.
[21:20.100 --> 21:21.960]  But that sort of thing can certainly happen.
[21:22.680 --> 21:25.160]  Again, lots of data because you're changing environments.
[21:25.920 --> 21:29.540]  A lot of times, one of the big things in consulting now is we all know...
[21:29.540 --> 21:32.160]  Does anyone not know who Bruce Schneier is?
[21:32.440 --> 21:33.000]  Raise your hand.
[21:33.000 --> 21:33.840]  One.
[21:34.120 --> 21:34.580]  A couple.
[21:34.700 --> 21:34.860]  A few.
[21:35.180 --> 21:35.280]  Okay.
[21:35.580 --> 21:38.860]  Bruce Schneier is probably the most famous photographer in the world, probably.
[21:39.160 --> 21:45.220]  Author of Applied Photography, The Seminal Work in the Field, Network Security, All-Around Crazy Guy.
[21:45.960 --> 21:47.740]  And a reasonably nice person to boot.
[21:47.740 --> 21:54.600]  And is the president, or CTO, and founder of Counterpane Systems, which is going to be the next ADT.
[21:54.620 --> 21:56.000]  Going to be the ADT of the internet.
[21:56.700 --> 22:01.600]  And so what they're doing is they're basically setting up sensors out in all their customers' networks.
[22:02.080 --> 22:05.300]  And gathering up all of the data and doing all sorts of processing stuff on it.
[22:05.340 --> 22:06.300]  Talk about lots of data.
[22:06.560 --> 22:07.180]  That's cool.
[22:07.660 --> 22:11.880]  Managed security services are another area that one of the analysts said is going to be big.
[22:12.220 --> 22:13.860]  So lots of people are getting into that field.
[22:14.180 --> 22:15.680]  There are a number of places that do it already.
[22:17.420 --> 22:19.300]  BBN, GTEI, Genuity now.
[22:20.580 --> 22:22.800]  And IBM have managed security services.
[22:22.960 --> 22:25.540]  It plays out for California called Pilot Network Services.
[22:26.080 --> 22:28.400]  There are a number of them that are popping up.
[22:28.480 --> 22:31.480]  Some of the boutique consulting companies are starting to do these things, too.
[22:32.140 --> 22:34.120]  That's small, for those of you who don't know.
[22:35.420 --> 22:37.540]  And big bots, if you do it right, anyway.
[22:39.540 --> 22:43.100]  Consultants can usually start off relatively low.
[22:43.100 --> 22:50.700]  But it wouldn't be unusual for a security consultant with two years of experience to be well into six figures.
[22:51.520 --> 22:52.840]  As a salary position.
[22:52.960 --> 22:56.800]  If you happen to be good enough to be going independent, you're talking big dollars.
[22:57.360 --> 22:59.520]  Hundreds of dollars an hour, at least.
[23:00.740 --> 23:01.800]  In a lot of cases.
[23:02.800 --> 23:05.400]  If you want to make a lot of money, that's the only thing you're interested in.
[23:05.460 --> 23:06.460]  You don't care about anything else.
[23:06.660 --> 23:07.460]  All you want is money.
[23:07.680 --> 23:08.520]  Do consulting.
[23:09.760 --> 23:10.960]  That's definitely where the money is.
[23:11.100 --> 23:12.140]  And development, you get code.
[23:12.300 --> 23:14.630]  Which you typically don't get in a lot of the other places, except research.
[23:16.070 --> 23:18.350]  Oh, one thing I should mention about research, too.
[23:18.570 --> 23:19.610]  Speaking of code.
[23:21.350 --> 23:24.910]  You might consider, also, the federally funded research centers.
[23:25.130 --> 23:26.350]  The FFRCs.
[23:26.830 --> 23:27.830]  MITRE is one.
[23:27.970 --> 23:29.210]  And RAND is another one.
[23:30.210 --> 23:30.890]  Oh, excuse me, MITRE.
[23:31.050 --> 23:31.630]  Another, sorry.
[23:32.530 --> 23:32.970]  Sidetrack.
[23:33.210 --> 23:33.770]  Sidetrack here.
[23:33.890 --> 23:37.530]  But MITRE, for those of you who don't know, is a private company.
[23:37.750 --> 23:38.670]  It's not-for-profit.
[23:39.110 --> 23:40.690]  It's a federally funded research center.
[23:40.690 --> 23:43.830]  They do a lot of work with DOD, NSA, lots of stuff.
[23:44.010 --> 23:46.110]  You have to have security clearance and all that cool stuff.
[23:46.590 --> 23:47.950]  And does anyone know what MITRE stands for?
[23:50.210 --> 23:53.250]  I heard this at the National Information Systems Security Conference.
[23:53.670 --> 23:56.230]  MITRE stands for mindless idiots trying to run everything.
[23:59.890 --> 24:00.290]  Okay.
[24:01.330 --> 24:03.630]  So, you know what the pros are, which is basically the money.
[24:03.710 --> 24:04.830]  But there are some other things as well.
[24:05.590 --> 24:07.010]  And so, what are the cons?
[24:07.350 --> 24:10.470]  Well, for starters, all of a sudden, you have something to lose.
[24:12.050 --> 24:15.510]  You know, this is all fun and games, breaking into everybody's stuff.
[24:17.370 --> 24:22.570]  And when, you know, you're 16 and you're juvenile and, you know, it's fine.
[24:22.590 --> 24:28.750]  But at some point, they'll actually put you in prison for an appreciable amount of time if you're doing bad things.
[24:30.250 --> 24:35.170]  And if you actually happen to be employed, then you're going to get fired quickly.
[24:35.730 --> 24:40.930]  And the time is passing somewhat when a pool hack would get you a job offer.
[24:41.090 --> 24:46.630]  It's still true to a certain extent, but it is increasingly becoming less common to do that.
[24:46.850 --> 24:49.250]  Because, primarily, the pool is growing.
[24:49.470 --> 24:51.690]  There are a lot of people sitting in this audience here.
[24:53.850 --> 24:56.030]  And most of them could probably do your job.
[24:56.510 --> 25:00.210]  Or at least make a reasonable case that they could do your job, which is all that really counts.
[25:00.650 --> 25:02.310]  Whether or not you can actually do it is irrelevant.
[25:02.510 --> 25:05.450]  But what's important is whether or not you can convince them to hire you to do your job.
[25:06.090 --> 25:09.450]  Important thing to keep in mind as we go further.
[25:10.010 --> 25:11.950]  So they will not hesitate to fire you.
[25:12.230 --> 25:16.730]  And you probably will have a very difficult time getting a job again with a felony prediction on your record.
[25:17.230 --> 25:17.750]  So back.
[25:18.330 --> 25:19.450]  Suddenly you have something to lose.
[25:22.090 --> 25:23.850]  And the man is afraid of you.
[25:24.070 --> 25:26.690]  Which may not seem like a con at first.
[25:27.250 --> 25:28.890]  Especially if you're still on the outside.
[25:31.210 --> 25:35.910]  But it becomes increasingly an impediment to your career development, shall we say.
[25:37.270 --> 25:41.830]  You don't really want to be the guy that they're afraid to fire.
[25:42.690 --> 25:44.750]  Or the woman that they're afraid to fire.
[25:44.950 --> 25:45.910]  Or the person if you're not.
[25:45.990 --> 25:46.750]  Either of those two things.
[25:46.930 --> 25:48.610]  That they're afraid to fire.
[25:49.730 --> 25:54.370]  Because if that's the case, then they're not really going to want to hire you either.
[25:55.030 --> 25:59.930]  And so changing jobs may become difficult should you choose to not be employed anymore.
[26:00.090 --> 26:00.890]  We're going to come to that later.
[26:01.610 --> 26:04.730]  But it's also going to be difficult to get increasing responsibility.
[26:04.730 --> 26:06.210]  To validate career development.
[26:06.390 --> 26:09.430]  Typically you're not going for just one job.
[26:09.690 --> 26:10.490]  And that's going to be it.
[26:10.790 --> 26:12.510]  Career development you're going to change jobs.
[26:12.870 --> 26:13.810]  You're going to change companies.
[26:14.210 --> 26:16.870]  You're going to move up the management chain perhaps.
[26:18.270 --> 26:21.090]  And it's not an advantage to be able to be afraid of you.
[26:21.210 --> 26:23.050]  If that's what you're interested in.
[26:25.190 --> 26:27.570]  And I'm actually going to come back to that if I have any time.
[26:27.570 --> 26:29.550]  But I want to make sure I get through the key points here.
[26:29.770 --> 26:30.650]  Because we're a little tight.
[26:31.930 --> 26:32.590]  You have to work.
[26:32.910 --> 26:33.850]  You know.
[26:35.610 --> 26:36.710]  Kind of a bummer in that.
[26:36.930 --> 26:37.850]  But you know.
[26:38.950 --> 26:40.310]  Especially the more money you make.
[26:40.350 --> 26:41.430]  The more they expect you to work.
[26:44.070 --> 26:44.710]  Go figure.
[26:44.710 --> 26:45.270]  It's weird.
[26:45.410 --> 26:47.510]  But it's there.
[26:47.810 --> 26:52.350]  And a lot of times you can sort of have fun and play when you feel like it.
[26:52.830 --> 26:57.110]  When you have a job they actually expect you to show up on a regular basis typically.
[26:57.630 --> 27:00.110]  Or produce things on a regular basis at least.
[27:01.550 --> 27:02.670]  And so yeah.
[27:02.730 --> 27:03.370]  You have to work.
[27:03.370 --> 27:03.670]  Now.
[27:04.550 --> 27:05.450]  A lot of you.
[27:05.670 --> 27:07.110]  I can see in your eyes.
[27:07.390 --> 27:07.730]  Are thinking.
[27:07.910 --> 27:07.990]  Well.
[27:08.110 --> 27:09.350]  I just do this stuff all the time anyway.
[27:09.530 --> 27:10.130]  It's great fun.
[27:10.350 --> 27:11.050]  I love it.
[27:11.350 --> 27:11.890]  We're just breaking.
[27:12.190 --> 27:13.130]  It's just going to be great.
[27:13.250 --> 27:13.430]  We're just.
[27:13.550 --> 27:14.930]  We're doing security all the time.
[27:15.190 --> 27:15.690]  So you know.
[27:15.810 --> 27:17.110]  Why not just get paid for it.
[27:17.190 --> 27:18.990]  And I can do the same thing I've been doing all along.
[27:19.670 --> 27:20.590]  And that's fine.
[27:20.810 --> 27:21.470]  Except that.
[27:21.870 --> 27:22.730]  The next point.
[27:23.130 --> 27:23.810]  Is that.
[27:24.170 --> 27:26.490]  The man has certain things that they want you to do.
[27:26.710 --> 27:29.810]  And they have a certain way that they want you to do those things in a lot of cases.
[27:30.650 --> 27:33.810]  And that can put a limitation on your fun.
[27:34.470 --> 27:34.490]  Okay.
[27:34.970 --> 27:39.970]  So I think it's very fun to go look at new and interesting ways to have together a links journal to do whatever.
[27:40.510 --> 27:40.610]  Right.
[27:41.190 --> 27:44.250]  But if your job is to be working on this website.
[27:44.910 --> 27:46.250]  That's not going to be very useful.
[27:46.470 --> 27:47.770]  And the man is going to get pissed.
[27:48.290 --> 27:48.370]  Okay.
[27:48.990 --> 27:50.270]  And that can be very convenient.
[27:50.450 --> 27:51.840]  It is what we refer to as a CLM.
[27:52.650 --> 27:54.030]  Which is a career limiting move.
[27:54.330 --> 27:54.530]  Okay.
[27:54.570 --> 27:55.690]  To not follow up on that.
[27:56.310 --> 27:57.390]  You have to be nice.
[27:58.470 --> 27:59.770]  I'm going to come back to that one again.
[27:59.770 --> 28:04.970]  But a lot of us sort of pride ourselves on being elite and egotistical.
[28:05.950 --> 28:08.650]  And generally not all that much fun to get along with.
[28:09.510 --> 28:12.890]  Unless you happen to be also in our elite group.
[28:14.270 --> 28:17.610]  But there are going to be a lot of people that you have to be nice to who are not.
[28:18.250 --> 28:18.350]  Okay.
[28:18.750 --> 28:21.150]  People like the office manager.
[28:22.370 --> 28:25.150]  Who stocks the Jolt Cola in the fridge for you.
[28:25.350 --> 28:26.830]  I should have mentioned that as one of the benefits.
[28:26.950 --> 28:28.790]  A lot of places you can get free soda and stuff.
[28:29.490 --> 28:29.890]  Snacks.
[28:31.890 --> 28:32.290]  So...
[28:32.290 --> 28:34.450]  But that's a person that you want to be nice to.
[28:34.630 --> 28:36.110]  Especially if you have special requests.
[28:36.910 --> 28:39.710]  If you're a Jolt fan and they don't typically stock Jolt.
[28:39.710 --> 28:42.030]  If you want to be friends with the office manager.
[28:42.330 --> 28:43.290]  That's a good example.
[28:43.430 --> 28:44.730]  And the office manager is typically...
[28:45.650 --> 28:46.530]  Not always.
[28:46.950 --> 28:47.870]  Don't anyone get offended.
[28:48.050 --> 28:49.190]  But is often adult.
[28:49.790 --> 28:49.910]  Okay.
[28:50.370 --> 28:52.210]  And is very hard to be nice to.
[28:52.350 --> 28:55.550]  Especially when they ask you stupid questions over and over again.
[28:55.550 --> 28:58.030]  About how to fix that Windows 95 box.
[29:01.230 --> 29:02.890]  Sales people are the same way.
[29:03.770 --> 29:06.450]  Sales people are the ones who are bringing in all the money.
[29:06.530 --> 29:08.310]  That's going through the company.
[29:08.490 --> 29:09.970]  Which is in turn getting paid to you.
[29:10.910 --> 29:12.070]  So sales is good.
[29:12.510 --> 29:13.470]  You like sales.
[29:13.710 --> 29:15.430]  Sales people on the other hand.
[29:15.830 --> 29:18.210]  Are often even duller than office managers.
[29:18.310 --> 29:19.410]  When it comes to technology.
[29:20.010 --> 29:23.250]  And often you will find the more complex the technology they are selling.
[29:23.510 --> 29:24.970]  The less they know about it.
[29:26.690 --> 29:27.990]  It's like buying a car.
[29:28.190 --> 29:28.870]  This is a good analogy.
[29:29.050 --> 29:29.150]  Right?
[29:29.150 --> 29:30.690]  You go to a salesman who knows...
[29:30.690 --> 29:31.870]  At a car dealership.
[29:31.970 --> 29:33.730]  Some of you are going to recognize this.
[29:33.810 --> 29:35.310]  Some of you have no idea what I'm talking about.
[29:35.730 --> 29:37.290]  But if you go to a salesman at a car dealership.
[29:37.310 --> 29:38.390]  And you say...
[29:38.390 --> 29:38.970]  You know...
[29:39.570 --> 29:39.930]  What...
[29:39.930 --> 29:42.090]  What size clubs does this thing take?
[29:42.110 --> 29:44.070]  So I can stock up on my replacement parts.
[29:44.130 --> 29:46.510]  They're going to have no idea what you're talking about.
[29:46.730 --> 29:46.950]  Okay?
[29:47.350 --> 29:48.810]  They know how much it costs.
[29:48.970 --> 29:49.850]  They know what the options are.
[29:49.910 --> 29:51.150]  They know what colors are available.
[29:51.470 --> 29:54.850]  If you're lucky, they'll know whether or not it comes with cloth or leather seats.
[29:55.570 --> 29:57.410]  Or whether or not you can get a sunroof put in.
[29:57.650 --> 30:02.290]  But they're going to have no clue when it comes to any technical specification about the vehicle whatsoever.
[30:02.750 --> 30:02.790]  Okay?
[30:03.170 --> 30:05.730]  Including something that you might think would be a selling point.
[30:05.870 --> 30:06.510]  Like say...
[30:06.510 --> 30:07.090]  Fuel economy.
[30:07.550 --> 30:10.490]  They may know that just because they've walked by the car a lot of times.
[30:10.590 --> 30:12.110]  And it's been big numbers on the stairs.
[30:13.950 --> 30:15.710]  But that's the only reason that they're going to know.
[30:15.810 --> 30:18.630]  It's just happening to sort of osmosis into their brain.
[30:19.930 --> 30:20.310]  Osmosize.
[30:20.470 --> 30:20.610]  Whatever.
[30:22.510 --> 30:33.790]  So, being nice to people who are, and I hesitate to say stupid, but technologically challenged, will prove difficult and is an important part of working for the man.
[30:35.770 --> 30:36.390]  Yeah.
[30:36.730 --> 30:36.850]  Our...
[30:36.850 --> 30:39.970]  No presentation would be complete without alphabet soup.
[30:40.250 --> 30:42.390]  So, here are our three-letter acronyms.
[30:42.610 --> 30:44.410]  IPA, NDA, and NCA.
[30:44.690 --> 30:49.890]  That's Intellectual Property Agreement, Non-Disclosure Agreement, and Non-Compete Agreement.
[30:50.090 --> 30:50.450]  Okay?
[30:50.910 --> 30:55.190]  All of which you will have to sign in order to get a job with almost anyone.
[30:55.690 --> 30:58.310]  In some form or another, they may be combined.
[30:58.670 --> 31:03.010]  There may be the Omnibus Employment Agreement, which will include all of these things.
[31:03.650 --> 31:07.830]  Pieces of them may be embedded in the Stock Option Agreement, which you'll also have to sign.
[31:09.150 --> 31:09.490]  And...
[31:09.490 --> 31:11.530]  But there are a couple of things that go on here.
[31:11.590 --> 31:18.730]  First of all, the IPA, the Insight for Property Agreement, says that everything that you do for the company is a work for hire.
[31:18.730 --> 31:19.550]  Right?
[31:19.710 --> 31:20.570]  What is a work for hire?
[31:20.770 --> 31:24.230]  Work for hire is something that you do that the company owns.
[31:25.170 --> 31:25.450]  Okay?
[31:26.610 --> 31:29.510]  There's been an interesting side note again here, this is an example.
[31:29.930 --> 31:33.930]  There's been a lot of pressure from the recording industry of America, right?
[31:34.390 --> 31:38.310]  To get music, songs, defined as works for hire.
[31:38.710 --> 31:39.190]  Why?
[31:39.790 --> 31:46.550]  Because then, if an artist who's under contract for the record company writes a song, creates a song, the record company owns it.
[31:47.010 --> 31:51.770]  And the artist has zero rights to anything about that goes on with that song, ever.
[31:52.410 --> 31:52.690]  Okay?
[31:56.420 --> 31:57.100]  Are you sure?
[31:57.500 --> 31:59.600]  Somebody says it's already passed, but I'm not sure.
[31:59.640 --> 32:02.200]  I'm not sure that it will pass mustering the courts either.
[32:03.140 --> 32:03.860]  Because it's...
[32:03.860 --> 32:04.960]  There's a long story there.
[32:05.040 --> 32:05.900]  I don't want to go up to that side note.
[32:05.980 --> 32:09.500]  However, code is absolutely a work for hire.
[32:10.800 --> 32:16.880]  Any code you write while in the employ of a company will be considered a work for hire, and you have zero rights to it.
[32:17.440 --> 32:17.520]  Okay?
[32:17.820 --> 32:20.920]  Your compensation is the compensation for the work that you're doing.
[32:21.080 --> 32:21.860]  And that's it.
[32:21.960 --> 32:22.460]  End of story.
[32:22.600 --> 32:24.840]  You can't put it up on your website and give it away for free.
[32:25.240 --> 32:27.540]  You cannot develop it later.
[32:27.540 --> 32:34.920]  You cannot distribute it to anybody outside the company who is not equally constrained by these contracts, et cetera, et cetera, et cetera.
[32:35.220 --> 32:35.360]  Okay?
[32:35.920 --> 32:56.080]  Now, some companies will have intellectual property agreements which are considered to be extremely liberal in that if you do work, okay, that is not done on company systems, company time, and is not derivative of the work that you are doing for a living,
[32:56.400 --> 32:58.240]  you might be allowed to keep.
[32:59.240 --> 32:59.680]  Maybe.
[33:00.420 --> 33:04.020]  Depending on how the IPA is structured and how good your lawyer is.
[33:04.560 --> 33:04.580]  Okay?
[33:05.180 --> 33:13.620]  Most companies, however, define that basically anything you do which is even remotely related to the work that you're doing belongs to them regardless of when you do it.
[33:13.620 --> 33:24.660]  If you go in on a two-week vacation and spend five days of your two-week vacation writing a piece of code to do whatever, if you are a developer, chances are that piece of code belongs to the company that you're employed with, okay?
[33:25.260 --> 33:32.260]  It may be the case even in some cases if you were to write, say, a novel that's about hackers, right?
[33:32.700 --> 33:35.320]  And you're employed as a security professional, okay?
[33:35.860 --> 33:45.120]  The intellectual property agreements could be interpreted by a court, and there would be a lawsuit to say that the company owns that too, okay?
[33:45.480 --> 33:47.740]  It's directly derivative of the work that you're doing.
[33:47.900 --> 33:49.140]  The case can be made, okay?
[33:49.140 --> 33:52.940]  So intellectual property agreements are, I like to call them fascist.
[33:53.420 --> 33:53.960]  And we have a question.
[33:54.120 --> 33:54.240]  Yes?
[33:55.120 --> 34:00.860]  On that note there, a good point of view is the
[34:05.420 --> 34:09.160]  company first-hand, get it in writing before yourself.
[34:09.460 --> 34:10.460]  You've come to my next point.
[34:10.560 --> 34:11.080]  Thank you very much.
[34:11.930 --> 34:20.450]  The point was made that if you're going to do something that is outside of your job responsibilities, like write a novel that's about hackers or something, talk to the company ahead of time.
[34:21.000 --> 34:30.080]  Most of these things will have a provision in them that written permission can be given for certain things to be done that are outside the purview.
[34:30.760 --> 34:32.340]  And I'm running short on time.
[34:32.520 --> 34:33.960]  I'm sorry, I know I said interrupt me with questions.
[34:34.100 --> 34:37.480]  Hold your questions to the end, though, because I've got to get through the rest of the stuff before I run out.
[34:37.980 --> 34:38.320]  Sorry.
[34:41.460 --> 34:42.540]  Intellectual property agreements.
[34:42.800 --> 34:45.740]  Look, read your intellectual property agreement before you sign it.
[34:45.840 --> 34:46.340]  Can't you?
[34:47.260 --> 34:47.840]  Good idea.
[34:48.060 --> 34:50.410]  And if you have a lawyer, run it by your lawyer first, too.
[34:50.540 --> 34:56.460]  Especially if you're doing something that's a creative work, like writing code or creating things in general.
[34:57.960 --> 34:59.760]  Non-disclosure agreements are pretty straightforward.
[35:00.140 --> 35:02.200]  It's that you can't tell anybody about anything that you do.
[35:02.980 --> 35:05.480]  There are caveats to that, obviously.
[35:05.480 --> 35:08.600]  Some things are considered confidential, some things are not considered confidential.
[35:10.440 --> 35:16.100]  When in doubt, ask your supervisor, because it may or may not be clear immediately what's going on.
[35:16.560 --> 35:25.680]  But general, as a rule of thumb, before you disclose anything to anybody, you should be sure that you are allowed to do that as a rule of thumb.
[35:26.760 --> 35:31.280]  Non-compete agreements are great fun, and they're really interesting.
[35:31.980 --> 35:35.780]  Unfortunately, there isn't too much case law on these yet, so we don't really know how it's going to play out.
[35:35.960 --> 35:53.380]  But the non-compete agreement that you will be asked to sign, or have signed in many cases, I'm sure, says something like, you cannot work in the field that you are currently employed in for anyone who is a competitor, usually very, very broadly defined,
[35:53.620 --> 35:57.720]  without waiting one year.
[36:00.680 --> 36:02.820]  So, just think about this for a second.
[36:03.340 --> 36:07.220]  Say that you are writing code security software, just as an example.
[36:07.840 --> 36:16.580]  And you're working for one company, say it's a firewall, you're working on firewall software, and you want to go work for this other company that does intrusion detection systems.
[36:17.280 --> 36:20.960]  Very different kinds of technologies, very different kinds of things that you're going to be doing.
[36:22.160 --> 36:25.380]  Nevertheless, chances are that your non-compete agreements would apply.
[36:26.440 --> 36:30.200]  That you would, in fact, be contractually barred from doing that.
[36:30.280 --> 36:33.020]  Now, in point of fact, everybody ignores non-compete agreements.
[36:34.020 --> 36:35.640]  Everybody ignores non-compete agreements.
[36:35.640 --> 36:45.420]  They can, however, be used in certain cases for senior people, primarily, to block them or to make noise for the company.
[36:45.740 --> 36:50.660]  But it may prove to be a limiting factor in getting the offer in the first place.
[36:51.860 --> 36:55.020]  So, non-compete agreements are nasty.
[36:55.360 --> 37:01.380]  And often, what may require you to make more dramatic changes than you would otherwise want to make.
[37:01.880 --> 37:07.740]  And you absolutely cannot go directly from one company that directly competes to another company that directly competes.
[37:07.920 --> 37:14.260]  So, if you work for Checkpoint, working on Firewall 1, you cannot go to Network Associates and work on Gauntlet.
[37:14.980 --> 37:16.600]  Or Accent and work on Crafter.
[37:16.800 --> 37:18.620]  Or whatever it is in commercial firewalls.
[37:18.880 --> 37:19.800]  Not going to happen.
[37:21.160 --> 37:26.020]  And you will almost certainly get sued, especially if you have any knowledge of how the thing works.
[37:26.460 --> 37:30.700]  And the company that you're working for will probably get sued, which will probably preclude them from offering you a job in the first place.
[37:32.600 --> 37:35.620]  So, read the contracts.
[37:36.660 --> 37:41.600]  It may be hard to get respect, especially for the younger folks in the audience here.
[37:41.940 --> 37:58.320]  You may find that even though you have the technical ability of the rest of the development staff combined, or the rest of the IT staff combined, who undoubtedly have more years of experience in the industry than you are years old.
[37:59.260 --> 38:00.200]  Possibly each.
[38:01.940 --> 38:03.040]  They don't care.
[38:03.260 --> 38:04.320]  You are the kid.
[38:05.580 --> 38:09.740]  And that will hold true probably sometime into your mid to late 20s.
[38:09.840 --> 38:11.040]  For those of you who aren't there yet.
[38:12.480 --> 38:14.120]  I can speak from experience.
[38:14.120 --> 38:18.480]  I'm 28 years old and I'm still referred to as the kid in a lot of circumstances.
[38:18.980 --> 38:21.340]  Mostly by guilt by association in my case.
[38:21.340 --> 38:26.880]  But that's a hurdle that may be difficult to get over depending on the environment.
[38:27.280 --> 38:34.360]  But most environments, corporate America and government, that's going to be a major hurdle for you to deal with.
[38:35.120 --> 38:36.980]  And is a major drawback.
[38:38.160 --> 38:39.020]  Big brother.
[38:40.020 --> 38:41.960]  Probably you don't know this or maybe you do.
[38:42.300 --> 38:45.220]  Data that's on a corporate system.
[38:47.200 --> 38:53.880]  The owner of a box owns the data on the box by default in case law.
[38:54.220 --> 38:57.100]  So that includes things like your emails that are sitting on the server.
[38:57.660 --> 39:01.020]  The company has every right in the world to investigate that stuff.
[39:01.140 --> 39:05.800]  And every right in the world to observe every keystroke on your company owned system at all times.
[39:07.080 --> 39:09.820]  That's been supported quite strongly in the course.
[39:10.500 --> 39:15.400]  There is a gray area for machines that are provided by the company for home use.
[39:15.680 --> 39:19.660]  There's a case pending now with some Northwest flight attendants.
[39:20.520 --> 39:23.040]  That were fired for...
[39:23.040 --> 39:24.340]  I'll make sure I get the stories right here.
[39:24.460 --> 39:27.920]  They were fired for conspiring to have a sick out.
[39:29.440 --> 39:31.520]  Which itself may or may not have been illegal.
[39:31.660 --> 39:32.740]  It's another separate issue.
[39:32.980 --> 39:34.740]  But we're sending back and forth emails.
[39:35.660 --> 39:39.620]  That were using the systems that the company had provided to them for home use.
[39:40.280 --> 39:43.460]  And the company found out about it by getting the data off of those systems.
[39:44.620 --> 39:47.120]  And observing the activity that was taking place in those systems.
[39:47.320 --> 39:50.420]  And that's going to be resolved in the courts probably in the next few months.
[39:50.880 --> 39:54.120]  But that's a gray area that you need to be aware of.
[39:54.560 --> 39:56.820]  Acceptable use policies are actually sort of the same point.
[39:57.940 --> 40:00.700]  There's a lot of things that you can't do with the system.
[40:01.060 --> 40:03.000]  Like say, port scan somebody.
[40:03.220 --> 40:05.780]  That's probably going to be a violation of somebody's acceptable use policy.
[40:06.680 --> 40:09.920]  Pinging them may also be a violation of an acceptable use policy.
[40:11.940 --> 40:16.580]  That's going to be another interesting area that's probably going to get resolved in the courts in the next year or two.
[40:17.500 --> 40:21.560]  You probably, you guys may have heard, this is the headline on HNN the other day.
[40:22.040 --> 40:26.260]  Quova, this company out in Silicon Valley, is ping scanning like the whole net.
[40:26.580 --> 40:27.820]  And people are kind of pissed.
[40:28.140 --> 40:28.780]  Go figure.
[40:31.420 --> 40:34.120]  And so, no lawsuits have come out of this yet.
[40:34.120 --> 40:36.340]  But I wouldn't be surprised at all to see one.
[40:36.980 --> 40:38.180]  They're pinging a traceroute.
[40:38.340 --> 40:38.580]  That's it.
[40:40.160 --> 40:40.960]  And it's...
[40:40.960 --> 40:41.740]  Side note here.
[40:42.440 --> 40:43.420]  Even though I'm running short on time.
[40:45.360 --> 40:46.500]  A pet peeve of mine.
[40:46.700 --> 40:52.500]  Vulnerability scanners, like ISS, CyberCraft Scanner, if I'm going to use Hikership button, all do this.
[40:52.760 --> 40:57.320]  They will record a vulnerability if you can traceroute to the system.
[40:58.180 --> 40:59.920]  Or if you can ping it, in a lot of cases.
[41:00.440 --> 41:01.660]  It shows up as a vulnerability.
[41:01.660 --> 41:01.780]  Absolutely.
[41:02.800 --> 41:04.260]  And that's cool, right?
[41:04.340 --> 41:07.700]  Because those of us who mostly are using them, we look at them like, yeah, yeah, traceroute, whatever.
[41:07.840 --> 41:07.940]  Sure.
[41:08.420 --> 41:09.420]  We don't care.
[41:09.920 --> 41:24.000]  But, you show this thing out to, say, an auditing department at a big company, and they're going to take this voluminous report that the scanner has put out, and they're going to drop it on the director of IT's desk and say, fix all the holes.
[41:24.940 --> 41:25.300]  Right?
[41:26.380 --> 41:37.060]  And his bonus, the director of IT's bonus, is going to be based on the part, whether or not they were able to respond to this security requirement that came down from the corporate auditing department.
[41:37.780 --> 41:47.480]  And that sucks, because there's going to be this big percentage that are just not useful checks that they're going to get docked on.
[41:49.680 --> 41:53.660]  Off hours, this is an interesting one, and it sort of ties back to the corporate agreement.
[41:54.320 --> 41:55.660]  Is there an off hours?
[41:57.860 --> 41:58.660]  Somebody said no.
[41:58.800 --> 42:01.040]  It depends on who you're working for or what area that you're working in.
[42:02.000 --> 42:06.060]  But the trend in the new economy is no.
[42:06.600 --> 42:11.100]  The trend in the new economy is definitely that all hours are on hours.
[42:13.040 --> 42:17.260]  Area-specific cons, research can be a very slow pace for a lot of people.
[42:18.060 --> 42:21.040]  Like I said, your goal may be, okay, we're going to turn on a paper this year.
[42:21.520 --> 42:28.900]  And that may not be enough stimulation to keep some people going, depends on how self-motivated people are.
[42:29.560 --> 42:31.640]  And the pay is typically low in academia.
[42:32.260 --> 42:33.920]  But you get your summers off, sort of.
[42:35.220 --> 42:38.640]  You get a lot of other benefits, but it's often lower pay.
[42:38.820 --> 42:40.280]  That's less true in the private sector.
[42:41.500 --> 42:45.120]  Operations, if you're the guy whose payers goes off at 3 a.m.
[42:45.220 --> 42:48.140]  when the IDS does its thing, then guess what?
[42:48.200 --> 42:50.900]  You have to wake up and find out what's going on.
[42:50.980 --> 42:52.240]  And that sucks, okay?
[42:52.620 --> 42:54.780]  I've been the recipient of pages at 3 o'clock in the morning.
[42:54.780 --> 42:56.460]  I see some heads nodding around here.
[42:56.640 --> 42:57.540]  It sucks.
[42:57.540 --> 42:59.920]  And it's often a rotational thing.
[43:00.160 --> 43:03.180]  If you're lucky, you get paid for that time.
[43:03.340 --> 43:04.260]  But only if you're lucky.
[43:04.600 --> 43:08.020]  And if you're really lucky, you get paid for when the pager goes off.
[43:09.580 --> 43:11.100]  But that's very rare.
[43:13.060 --> 43:15.100]  Being an exempt employee.
[43:15.540 --> 43:16.260]  That's right.
[43:16.580 --> 43:18.320]  Salaried employees are exempt.
[43:18.460 --> 43:19.500]  You can't unionize.
[43:19.660 --> 43:20.880]  You can't never go there.
[43:21.720 --> 43:23.640]  You're going to start at my socialist roots.
[43:24.460 --> 43:26.860]  Alright, it's also a thankless task.
[43:27.600 --> 43:29.040]  IT staff never...
[43:29.040 --> 43:32.000]  No one ever will go up to the IT staff and say, nice job.
[43:32.340 --> 43:32.940]  Way to go.
[43:33.060 --> 43:36.320]  We had 99.9% uptime this year, and that's awesome.
[43:36.740 --> 43:37.880]  No one will notice.
[43:38.060 --> 43:39.320]  They only notice when things break.
[43:40.560 --> 43:41.900]  And some of you already notice.
[43:43.540 --> 43:43.980]  Consulting.
[43:44.080 --> 43:44.800]  Tons of travel.
[43:45.040 --> 43:47.080]  The change of scenery was a pro.
[43:47.200 --> 43:48.420]  The tons of travel was a con.
[43:48.800 --> 43:51.040]  I've mentioned a little bit about why that's the case.
[43:51.840 --> 43:54.880]  Even though all the frequent flyer miles may seem like a good deal.
[43:55.000 --> 43:55.440]  It's not.
[43:55.800 --> 43:56.340]  I assure you.
[43:57.400 --> 43:59.620]  And it's very high pressure in a lot of cases.
[43:59.640 --> 44:01.740]  You have billability requirements.
[44:01.920 --> 44:03.400]  You need to be out on customer sites.
[44:03.460 --> 44:04.280]  You need to be doing this stuff.
[44:04.380 --> 44:06.100]  You need to go over the paper within a certain amount of time.
[44:06.240 --> 44:07.040]  You need to go out and get the presentation.
[44:07.340 --> 44:08.080]  You need to wear a suit.
[44:08.260 --> 44:09.160]  It really sucks.
[44:11.560 --> 44:14.200]  I dressed up today to give my talk.
[44:14.360 --> 44:15.320]  I wear a shirt with a collar.
[44:17.280 --> 44:18.440]  Research is good.
[44:19.060 --> 44:22.060]  Shorts and jeans and t-shirts and whatever.
[44:24.240 --> 44:26.520]  Development doesn't have a lot of cons really.
[44:26.760 --> 44:29.260]  Except being a group effort.
[44:29.500 --> 44:34.820]  Commercial development is not usually done by one person for a code base.
[44:34.820 --> 44:39.780]  So there's often a very low tolerance in that kind of environment for cowboys.
[44:40.500 --> 44:42.860]  People who want to go off and just go and do this thing.
[44:43.020 --> 44:44.440]  And don't want to document their code.
[44:44.640 --> 44:46.180]  And don't want to write design documents.
[44:46.300 --> 44:47.380]  And go and have peer review.
[44:47.740 --> 44:48.640]  Code reviews.
[44:49.700 --> 44:50.580]  Architecture reviews.
[44:50.740 --> 44:51.200]  Review this.
[44:51.320 --> 44:51.800]  Review that.
[44:52.620 --> 44:58.480]  And that can be a real stymie for some folks who can just sit down behind the keyboard and bang it out.
[44:59.720 --> 45:02.740]  And write a million lines of code in a week.
[45:05.420 --> 45:06.480]  Okay, living with demand.
[45:06.620 --> 45:07.860]  We're running very short on time.
[45:08.040 --> 45:08.620]  Five minutes.
[45:08.860 --> 45:10.380]  So I'm going to pick up the pace a bit here.
[45:12.580 --> 45:14.120]  Or, how to get what you want.
[45:15.940 --> 45:16.660]  Negotiate up front.
[45:17.140 --> 45:19.980]  You have to be willing to walk away from the deal in order to get the deal that you want.
[45:20.280 --> 45:25.520]  It is much, much more difficult to get a raise than it is to get higher at a big raise.
[45:26.380 --> 45:29.540]  Once you're there, they figure you're not probably going to go anywhere.
[45:29.540 --> 45:30.880]  It's easier to stay.
[45:31.380 --> 45:34.780]  You've got your 401k vesting stuff to deal with.
[45:36.320 --> 45:39.640]  And, you know, it's a big pain in the butt to go anywhere.
[45:40.680 --> 45:44.540]  So they, the company will figure that they are in a better position than you are.
[45:44.620 --> 45:45.860]  And for the most part, they're right.
[45:46.220 --> 45:47.220]  So negotiate up front.
[45:47.340 --> 45:48.500]  Get as much as you can up front.
[45:48.580 --> 45:50.000]  Get the stock options up front, too.
[45:50.000 --> 45:53.080]  Some places won't grant stock options after you're already hired.
[45:53.460 --> 45:54.280]  Which is sort of bizarre.
[45:54.540 --> 45:57.740]  Or at least until you're near the end of your vesting period or something like that.
[45:58.800 --> 46:01.480]  And even if you've gotten a big promotion, sometimes they won't do it.
[46:01.700 --> 46:03.180]  That can be very convenient.
[46:04.020 --> 46:04.920]  So you want to do that.
[46:05.080 --> 46:06.140]  The last two points.
[46:06.220 --> 46:07.320]  Be honest and communicate.
[46:07.940 --> 46:10.220]  Sort of go to the earlier one about being nice.
[46:12.360 --> 46:14.020]  Be up front with your employer.
[46:14.020 --> 46:18.780]  Being up front with your employer protects you from a lot of nasty things that they can do to you if you lie.
[46:19.080 --> 46:19.900]  Lying is bad.
[46:21.140 --> 46:22.440]  It's better as...
[46:22.440 --> 46:24.060]  Somebody said this on the radio the other day.
[46:24.260 --> 46:28.220]  What Clinton got in trouble for was not having sex with the intern.
[46:28.380 --> 46:30.360]  What Clinton got in trouble for was lying about it.
[46:30.620 --> 46:30.820]  Okay.
[46:31.320 --> 46:33.100]  And that's reasonably true.
[46:33.280 --> 46:35.440]  And it's the same thing holds true in a lot of these cases.
[46:35.820 --> 46:38.620]  Not every case, as you can ask Brandon Schwartz if he's here.
[46:39.780 --> 46:41.380]  Some of you are chuckling to the story.
[46:42.520 --> 46:43.500]  But it helps.
[46:44.360 --> 46:44.780]  It helps a lot.
[46:44.900 --> 46:46.440]  And communicate also the same thing.
[46:47.560 --> 46:49.500]  Tell your boss what's going on.
[46:49.880 --> 46:53.320]  If you're going to be out, if something came up, call them up.
[46:53.580 --> 46:54.160]  Do stuff like that.
[46:55.280 --> 46:58.420]  Especially relevant for intellectual property agreements.
[47:01.740 --> 47:02.760]  Doing an interview.
[47:05.260 --> 47:06.800]  Don't let them interview you.
[47:07.400 --> 47:08.700]  You're the one with the talent.
[47:09.520 --> 47:12.240]  If they don't want you, go someplace that does.
[47:13.060 --> 47:14.900]  There are plenty of companies out there.
[47:16.120 --> 47:18.540]  This is an employee's market.
[47:18.760 --> 47:22.180]  The employment rate in the U.S. is at near all time lows.
[47:22.500 --> 47:23.360]  And it's fantastic.
[47:23.760 --> 47:25.660]  And that will change in a few years, I assure you.
[47:25.900 --> 47:28.740]  But for now, go where you want.
[47:28.960 --> 47:32.660]  Make sure that you're the one who's doing the interviewing and not the other way around.
[47:33.480 --> 47:34.860]  You're the one who has the skills.
[47:35.860 --> 47:37.620]  Ask about the stock option agreements.
[47:37.720 --> 47:39.380]  Get the details of the vesting arrangements.
[47:39.920 --> 47:44.060]  There is a wild variation in the vesting plans for stock options.
[47:44.280 --> 47:50.460]  Ranging, the worst one I've heard, which I'm sure is not the worst that's out there, is the worst for an internet company.
[47:50.820 --> 47:53.000]  Five years, vesting 20% each year.
[47:53.600 --> 47:59.540]  The best I've heard is a three year plan that vests you one third at the end of your first year.
[47:59.540 --> 48:01.440]  Typically, you don't get anything until the end of your first year.
[48:01.900 --> 48:05.520]  And then vests the remainder daily for the remaining two years.
[48:06.120 --> 48:06.720]  That's cool.
[48:08.160 --> 48:09.040]  Monthly... sorry?
[48:09.740 --> 48:10.760]  I'll tell you afterwards.
[48:14.180 --> 48:16.620]  Anyway, so there's a wide variety there.
[48:17.020 --> 48:22.680]  Ask them to explain the non-compete agreements, the non-disclosure agreements, the intellectual property agreements up front.
[48:22.900 --> 48:27.020]  It's much harder to get out of it than it is to not sign it in the first place.
[48:29.280 --> 48:31.780]  And expected hours, mostly for IT people.
[48:31.920 --> 48:33.080]  What's your on-call thing?
[48:33.440 --> 48:34.820]  How much vacation time do you get?
[48:34.960 --> 48:37.440]  Important things that you may not necessarily think of in the interview.
[48:38.460 --> 48:41.060]  When you're leaving, provide written notice.
[48:41.560 --> 48:42.020]  Always.
[48:42.260 --> 48:45.260]  It protects you in a lot of ways as much as it protects your employer.
[48:45.760 --> 48:49.480]  Be prepared to be escorted off the premises the moment you give notice.
[48:50.580 --> 48:51.040]  Why?
[48:51.360 --> 48:52.600]  Because the man is afraid of you.
[48:52.600 --> 48:53.020]  Okay?
[48:53.740 --> 49:02.840]  And it is policy in a lot of companies for anybody who is in a security sensitive role to immediately be escorted off the property by armed guards in some cases.
[49:03.400 --> 49:03.500]  Okay?
[49:04.100 --> 49:05.500]  And don't take it personally.
[49:06.000 --> 49:06.220]  Okay?
[49:06.260 --> 49:06.740]  I put that on there.
[49:06.900 --> 49:06.980]  Okay?
[49:08.360 --> 49:10.100]  And be ready for that.
[49:10.440 --> 49:13.000]  You can expect that that's probably going to happen.
[49:13.480 --> 49:13.620]  Okay?
[49:14.220 --> 49:15.280]  At least once.
[49:16.280 --> 49:17.900]  And don't forget that they're afraid of you.
[49:19.080 --> 49:21.200]  Offer to, you know, disable your accounts.
[49:21.420 --> 49:24.680]  I actually left one small company that I worked for for a while.
[49:24.880 --> 49:27.160]  And I changed all the root passwords before I left.
[49:28.040 --> 49:29.460]  Because I didn't need that kind of temptation.
[49:30.700 --> 49:30.980]  Okay?
[49:31.200 --> 49:33.720]  So, here we are wrapping up and we are out of time.
[49:34.340 --> 49:35.120]  Why sell out?
[49:35.260 --> 49:36.220]  You should do it for the money.
[49:36.340 --> 49:37.880]  If you're not doing it for the money, you're an idiot.
[49:38.440 --> 49:38.500]  Okay?
[49:40.760 --> 49:43.940]  You're giving up your soul for some period of your life.
[49:44.480 --> 49:44.700]  Okay?
[49:45.080 --> 49:47.520]  And you're doing it for the money and the benefits and so forth.
[49:48.240 --> 49:51.320]  If you think that you're going to do it to change the world, you're deluding yourself.
[49:51.740 --> 49:51.960]  Okay?
[49:52.120 --> 49:55.020]  You're never going to change the world by working for the man.
[49:55.200 --> 49:56.080]  No one ever does.
[49:56.160 --> 49:57.080]  And you're no exception.
[49:57.600 --> 49:57.700]  Okay?
[49:59.020 --> 50:02.920]  And if you want to actually get the money, then you need to be careful and not throw it away.
[50:03.040 --> 50:03.940]  Don't do anything stupid.
[50:04.440 --> 50:04.540]  Right?
[50:05.100 --> 50:12.160]  And it's better, by the way, to not do something than it is to think that you're not going to get caught.
[50:12.600 --> 50:13.680]  Or that you're going to get away with it.
[50:14.160 --> 50:19.120]  Don't think, unless you're working at a very small company, that you know all of the security measures and all of the security people.
[50:19.800 --> 50:19.920]  Okay?
[50:20.160 --> 50:20.800]  You don't.
[50:20.880 --> 50:21.760]  I assure you.
[50:22.280 --> 50:25.200]  Especially, the larger the company it is, the more true that is.
[50:25.540 --> 50:25.640]  Okay?
[50:26.140 --> 50:28.440]  So, be careful.
[50:29.580 --> 50:32.240]  And if you want more money, be more professional.
[50:32.240 --> 50:34.280]  Work on your communication skills.
[50:34.480 --> 50:35.480]  Work on your writing skills.
[50:35.740 --> 50:36.960]  Be nice to people.
[50:38.360 --> 50:39.800]  That is how you move up the ladder.
[50:40.080 --> 50:43.780]  Getting better at your technical skills does not move you up the ladder.
[50:45.380 --> 50:48.200]  Getting more political connections moves you up the ladder.
[50:48.440 --> 50:52.200]  Being able to make a presentation to senior management moves you up the ladder.
[50:52.620 --> 50:52.680]  Okay?
[50:53.260 --> 50:55.240]  Communication skills and writing skills.
[50:55.300 --> 50:57.320]  Work on your spelling, for God's sake.
[50:58.940 --> 51:00.880]  The spelling on the internet is atrocious.
[51:01.140 --> 51:02.340]  We could all go back to school.
[51:03.880 --> 51:05.460]  Which is another point, actually.
[51:06.280 --> 51:08.400]  Finish school if you can by any stretch.
[51:08.980 --> 51:11.860]  A lot of people will try to get hired out of colleges.
[51:13.000 --> 51:16.140]  Talented people will often try to get hired out of colleges, sometimes high schools.
[51:16.680 --> 51:17.580]  I've done this.
[51:17.740 --> 51:18.740]  I'm guilty as charged.
[51:19.040 --> 51:28.600]  However, I also have as an offer to go with that, tuition reimbursement, encouraging and giving people the time they need in order to pursue their degrees.
[51:28.600 --> 51:32.340]  Ask for that kind of stuff, because it's extremely important that you finish your degree.
[51:32.740 --> 51:35.160]  Everybody should finish at least one undergraduate degree.
[51:35.400 --> 51:38.520]  It will serve you in good stead for many years, I assure you.
[51:39.340 --> 51:42.360]  If you do a graduate degree in any field, do it.
[51:42.540 --> 51:50.880]  I have a master's in sociology, and it has served me very, very well in my career as a student.
[51:51.960 --> 51:56.380]  So, thanks for coming, and I'm sorry that we ran out of time.
[51:56.740 --> 51:58.380]  So, if you have questions...