As time has gone by, I find I just don’t have enough interest in infosec to keep up on it anymore. Granted, I don’t work in it anymore, so there’s no need to do so from a professional point of view. As I see it, the most urgent issue infosec faces isn’t technical but instead psychological–maybe it always was. Folks seem convinced that their beliefs can change reality, whether that’s for AI, crystals, quack health remedies, or whatever the latest fad is on Tiktok. For tech folks, they believe that if you try hard enough, you can transform a digital magic 8-ball into something more reliable without doing the work required to make it so. It’s not a magic 8-ball’s fault that its answers are arbritrary, that’s the way it was designed.

If folks are going to rely on a technology that gives responses that look right without having any assurance they are right, they should only be using it for purposes of entertainment, not for things that matter. In a sense, we’re creating a tool that is ever better at fooling us, vs. one that is actually improving the quality of responses. Pretty sure that’s not going to get us the results we want.

That said, I don’t have the ability to lead folks. I have these insights and believe them to be well-founded, but the stampede can’t be reasoned with, at least not with my skill set. I’m not interested in joining that herd, and I’m not going to head them off before they reach the cliff. I’m just not interested in where they’re going.