Monthly Archives: October 2019

Escape

When people hear the story of Dimitra’s death, they often comment on how beautiful our relationship clearly was and how much we loved each other. This always makes me feel a bit uncomfortable.

Yes, we loved each other and I am forever grateful for the time we spent together. And yes, looking back it was beautiful, if only because an unexpected early death makes it easy to see the beauty of what was before. But there were also things that weren’t working and that we both, for different reasons, were ignoring. Things that couldn’t have lasted much longer.

I can only guess Dimitra’s reasons for not facing what wasn’t working. I know mine. I was afraid. Afraid that we couldn’t fix things without doing irreparable damage to the relationship.

When I say I felt very peaceful in the months after her death “because death brings you close to what life is really about” this is only partly true. I also felt a sense of relief that I wouldn’t have to do this difficult work.

That isn’t pretty and it isn’t something I am proud of. I am okay with Dimitra’s death. But as a consequence I got a very easy way out of doing something big and important. I am not okay with that.

There is a famous phrase from The Leopard: “everything needs to change, so everything can stay the same”. I have started to interpret this freely to mean that if you really want to change a situation, you should be willing to accept having to leave altogether, which is still better than not doing anything about it.

Belatedly, I am working on that. I keep saying I want to do “great things” (and then quietly remind myself that merely writing these things isn’t good enough). I won’t be able to do so if I keep avoiding difficult things in professional and personal situations.

I am okay with what happened last year. But I owe it to myself, to Dimitra and to the world to learn from this not-so-great part of our life together and to do better.

Meta

I started using this blog for ‘mental health blogging’ a little over four months ago. The motivation was pretty obvious: I had lost my wife, found processing our relationship to be more complicated than initially anticipated and struggled with moving on. I thought writing could help.

I certainly did help.

I never had a clear idea of where I wanted to take this writing, but in the back of my head, I always had some implicit end goal in mind. Getting over something. Working through something. Being ready for something.

But what if I change that goal and instead try and become a bit better every day for the rest of my life? A better human being. Better at dealing with things that happened in the past. Better prepared for things that may happen in the future.

Of course, I might not always be writing on this blog, which is only ever a means to an end anyway. But making this end a moving rather than a still target seems a much healthier thing to do.

And while doing that, it is good to note that writing on its own is never going to be enough. Writing doesn’t ask questions. It doesn’t ask whether I really was okay when I describe periods when things were fine, or whether that thing I write about is really what had been bothering me as I claim it had.

And thus I need to remind myself that I am not always the most reliable narrator when it comes to my own life, especially when things move beyond facts. Or, as I put it to a friend the other day: on my blog I write what I feel, or maybe what I want the world to believe I feel.

So let me not forget that talking to people, both personally or professionally, will always be very important too.

Onwards and upwards. Forever.

Ciabattas

that day I went to the post office
even though I didn’t want to
but I still did
grumpily
but then lovingly too
and picked up your parcel
and got ciabattas on the way back
for lunch
because you liked ciabattas
and you were so happy
and said you loved me

I often think of that day
to remind myself
that in our own funny little way
we really loved each other

and also
because it would be our last day together

In which I am looking for new work

So I am looking for new things to do. This is a post that provides some background to that.

I joined Virus Bulletin in January 2007. I was hired to do maintain its website and make sure it didn’t fall over when the BBC and Slashdot linked to it, which I did, but then there were more things at the company that needed doing and I realised I kind of liked security so I stayed on. I built a test for email security products (we called them spam filters back then) which is still running. I started doing other things too, such as write blog posts, give conference talks, and build a web security test framework. I also became heavily involved in our conference. Then, in 2014, I became Editor, which in VB’s funny set-up means I kind of run the company and I am pretty involved in just about everything the company does, from making budgets to writing test reports, and from doing pre-sales talks to putting together the conference programme.

But the time has come for me to move on. In part because I think I have done at VB what I can do. In part to close a chapter in my life. And in part ─ and this is actually the most important part ─ because there are so many other exciting and important things to do.

My main requirement for future work is that what I do is meaningful and makes an actual difference. I have a strong interest in work related to civil society, but I know a big difference can be made elsewhere too. I would like my dozen years of working in security, and thus getting a pretty good grasp of how security works beyond the sales pitches and scary headlines, to be turned into something really good.

I am looking for a full-time, or mostly full-time position, at a new location, but I would be happy to work on short term and possibly part-time projects for a while. I do like working towards a clear, tangible goal, so that could actually be exciting.

I think my understanding of security and my experience in it is rather broad, which is one way of saying I am not necessarily good at one particular thing. I can do a lot of things reasonably well and I think I would be most useful in a broad, varied role.

I can do research. Though never a core part of my job, I have analysed spam campaigns and, based on C&C traffic, malware families. I have done many smaller, ad hoc research projects. I have a background as an academic researcher in pure mathematics, which gives me a pretty good understanding on topics such as machine learning and cryptography. I have given a number of technical talks on the latter subject. I am familiar with a wide range of research tools and can program and design technical systems.

I can write. I have written a great many blog posts for Virus Bulletin, as well as guest articles for various sites such as Forbes and Ars Technica. I write a weekly newsletter on threat intelligence. I have written technical reports and edited a many often technical papers written by others. In the past, I have written articles on music, history and mathematics.

In can speak. I have spoken at more than a dozen industry conferences around the world including RSA, Nullcon, AfricaHackon, NorthSec and TROOPERS. I have given talks at private industry events. I have given both technical and non-technical talks, depending on the subject and the audience. I have helped others prepare for talks and sometimes speak to the media.

I can plan. I have been the main organiser for the Virus Bulletin conference since 2014 and have been a member of various industry committees. I currently serve on the board of AMTSO. I was chairman of the students’ association for maths students and a student member of the faculty council at my university. At VB, I have worked in implementing various regulations and managed a remote team.

I also know a lot of people in infosec. This can come useful in future jobs, especially when it comes to using their help in achieving a goal.

I have over the course of my career in infosec come to learn that the challenges we face are far less of a technical nature than we are led to believe. I would like future jobs to be technically inspired rather than purely technical, but I do enjoy the occasional deep technical challenge. Working with an inspiring team is even more important to me though.

Two final things. First, I am a white man working in an industry with an abundance of white men. If you find yourself discussing possible work with me, which undoubtedly will involve me trying to convince you I can do that work, please try and be critical and consider whether it makes a difference to you that I confirm to the stereotype of an infosec professional.

Secondly, it is important for me to work in a diverse and inclusive work environment. Not only do I believe that as individuals we have more to learn from people that aren’t like us, but a big part of information security is about trying to understand other people’s threat models, thus making working with those other people, in an environment that suits them as much as it does me, of vital importance.

I you want to talk about work, please email me at thinksmall on gmail, or find me on LinkedIn or Twitter.

Fifteen

“Time heals all wounds” people kept telling me after Dimitra’s death and I never really knew how to respond. I actually felt very peaceful and perhaps more closely connected to her than ever during our relationship. All time seemed to do was trying to disrupt that peace.

Indeed, as I noted three, four and then five months since her passing on Facebook and Twitter, I felt myself shouting: hold on time, not so fast! Please let me live in this moment a bit longer!

But time never waits and so it became six, seven and then eight months and eventually even twelve months, a symbolic moment that made more of a difference than I had expected.

For a long time, Dimitra could have rejoined my life fairly seamlessly. Now, if she were to somehow come back, it would be rather awkward and not just because I mostly sleep on what used to be her side of the bed now.

That is a good thing. This isn’t her life any more. It is my life now.

This evening marks fifteen months since she took that taxi into eternity. Fifteen months since I last heard her voice. Fifteen months too since I last had doubts about our relationship.

I miss her. I miss looking after her, making lunch and making the bed. I miss making her happy. I miss discussing things with her and asking for advice.

I also regret not being brave enough during our time together to fix the many things that weren’t working. Death is underappreciated for making most things okay and these things are okay now, but at the same time, it should be a darn good reason to try and do better in the rest of my life.

It is good to have things to work on.

Today, as I was doing some tidying around the house, I found myself thinking of a temporary place for some not too crucial items. And then I had to tell myself: hold on, isn’t the idea that in not too long, you want to move away from here? Shouldn’t you start throwing things out and giving them away?

So I went and bought a roll of bin bags. I am less focused on the symbolism of yet another month since Dimitra’s death, but it is good day to start throwing things out. Many more bags will follow.

It is really good to have things to work on.