trustworth.ee A most trustworth.ee corner of the Internet.

Seth Hanford

I’ve spent over 20 years in cybersecurity, following a winding path from sysadmin consulting days, through vulnerability intelligence, product security, threat research, management, blue team work, back to individual contribution as member of senior technical staff. All the details are on LinkedIn

Some of the things that have most shaped my career:

I read a lot of books as a kid. I wanted to be a novelist when I grew up
- My mom suggested that “novelist” probably wouldn’t pay the bills, so I went to school for computers instead
- By great fortune, I was given a full scholarship to a school, so I went there
- By even more great fortune, I found out you could write about cybersecurity and get paid for it. They called me a “Security Intelligence Analyst”
I enjoyed ~10 years in the Boy Scouts of America
- I’m an Eagle Scout
- I’m a Vigil Honor recipient in the Order of the Arrow
- I love camping, fire building, and singing campfire songs
- I love teaching boys & girls how to operate as adults, while having adventures in the outdoors
Twitter
- I spent years as an open source intelligence analyst scouring the Internet for breaking security news
- Then, Infosec went to Twitter and you only had to scour a curated timeline to get all the great news
- He Who Shall Not Be Named wrecked that, tho
- I’m on Mastodon now: @ckure@infosec.exchange
Great mentors
- I’ve learned a ton about leadership, service, and integrity and try to pay that forward to…
Great mentees
- I’ve learned how little I really know and I love to share my experiences with those who are open to sharing their perspectives, hopes, and dreams with me in return
All but ~4 years of my career have been as a full-time remote worker (from back in the day when we were called ‘telecommuters’)
Speaking up about my disdain for CVSS v1 led me to join the CVSS v2 Special Interest Group, then become Co-Chair of the v3 SIG.
OpenBSD
- I love the simplicity, completeness, and overall approach to building a coherent OS

Some things that I’ve done:

Github
FIRST Conference 2020 - Pwning Password Complexity: Simple, Long-Lived Passphrases in the Real World - Video
RVASec #6 - Defend the Defenders: Managing & Participating in Excellent Teams - Video
RVASec #3 - CVSS v3: This one goes to 11 - Video