Learning in the Open

I’ve been tooling around in my free time trying to learn about red teaming and building out my own security harness. Working at Vanta and thinking about security and compliance has really raised my interest in how security works. I’m currently working through Gandalf built by lakera.ai, which feels like an awesome resource to give away for free.

I don’t know how well I am going to stick with this, but I’ve been wanting to blog about learning something for a while now and I think this might be the ticket.

My first learning is that this feels a lot like what I imagined social engineering would be like. You’re just acting confident and trying to sound like what you want is a legitimate outcome. I’ve done two exercises and a handfull of password breakers but I’m really looking forward to seeing how this opinion changes.