Hacker Mindset
Solving problems is a state of mind
Hey this is Chris from the Cyber Seneca Letters with another episode of cyber Hacker Philosophy Weekly.
Letter 3 was published recently, titled "On Fair Winds." Check it out via blog, podcast, or video!
One of the subtopics in that letter talked about having a hacker mindset and I wanted to do a deep dive on that for a few minutes. I feel there are some important concepts in there that can help people at all stages of their journey.
When I used to hear the word hacker, it brought only one thing to mind: someone that breaks into computers. As I've grown into a professional red teamer, and then manager of red teams, the definition for the term has changed.
See I was applying the term hacker to actions only. Now I’ve started to realize that it isn't a thing that is done, it's how a thing is done. Being a hacker is a mindset, and mindsets are something that can be cultivated and grown.
So what is a hacker mindset and how does is it differ from an offensive security mindset or red team mindset?
A hacker is someone that will solve a problem through whatever means they have available to them.
A hacker is someone that will solve a problem through whatever means they have available to them.
An offensive security mindset is solving problems via methods that take the solution to the problem.
A red team mindset is solving problems through a defined set of tools and techniques.
The further we stray away from a hacker mindset, the more narrow our tools to solve problems become. I realize this the most when I talk to red team operators and ask "Why do you like being a red teamer?"
"Because operations are fun!"
It's a tautology: I like doing ops because ops.
And while a red team mindset may be appropriate for a person early in their career, it will lead to stagnation if and when that person starts to grow and push the boundaries of themselves.
One step up, offensive security mindset: taking the solution to the problem.
…an offensive security mindset is a comfortable mental state to exist in
To me, an offensive security mindset is a comfortable mental state to exist in. We aren't so limited by our own scope, and we follow through to make sure that the problem gets fixed by bringing our solutions to the problem.
People that practice and live in the offensive security mindset use their own skills to make their environment, their team, or their world a better place. If I were to practice this mental state, I would be bringing my experience, the tools that i know, and the tradecraft in which I can wield these tools, to the problem.
An offensive security mindset is proactive. It has the opportunity and potential for growth, and a growth mindset is important ingredient for a fulfilled life.
So what about a hacker mindset? A hacker mindset is the simplest: solve a problem, using whatever is available.
A hacker mindset is the simplest: solve a problem, using whatever is available.
The biggest difference from an offensive security mindset and a hacker mindset are people and processes. The scope of solutions has increased, as hackers are no longer taking full responsibility for the implementation of the solution.
We care not that we solve the problem personally, only that it gets solved.
A hacker mindset is a step away from our ego, and always a step toward moving forward. If I can solve a problem through the enablement of another person: I do it! If I can solve a problem by tweaking a process or policy: I do it!
What separates a hacker from an offensive security professional? Ego.
What separates a hacker from an offensive security professional? Ego.
If I am unwilling to let someone else solve a problem or fix something, that is my ego getting in the way of moving forward.
Hackers are inclusive of all professions, of all peoples, because the message is simple enough to understand: find a problem, get problem fixed.
It is for this reason that I am proud to call myself a hacker manager. I grow by helping enable hackers: people who are willing to solve problems, disregard ego, and focus on the mission.
Farewell, and may fair winds ever move you forward.