There seem to be a lot of people who think the problem with cyber security is we aren't paying lawyers enough. This results in the current push for software liabilities, or the need to click accept on cookies before we use every website. It is natural for lawyers to want to feed the next generation of associates, by regurgitating legal koans into their mouths. These vomitous truisms pass for thought leadership when you go high enough into the cyber policy clouds. "We don't know what we don't know!", "You can't manage what you can't measure!" , "We need to be Secure to Market not First to Market!", "Crawl, Walk, Run!"
These statements are the opposite of haikus, which when done right are one crystalized emotional moment. This is why I think maybe we should hire more poets to do cyber policy, instead of lawyers. What is "i carry your heart with me(i carry it in" other than the first line to an exploit written in a bash script we all forgot existed but our spirits remembered?
When LSD-PL said:
bn,a
bn,a
call
did that not carry with it an emotive punch? When we hack, do we not reach within our internal well of hate to pull forth a tiny amount of darkness and then send it into the world on tiny flaxen wings? I cannot do a survey on this in any language that matters, but I look into the net and see all the ancient hackers I grew up with still crouched in full armor, their ocher swords smoldering.
This week in between cyber policy calls at 0500, I sat for hours, choking on the byzantine syntax of LangChain attempting to wrestle an LLM into submission. I kept thinking, what would Horizon do? What would Shubs do? What would James Kettle do? What would Tiraniddo do? What would Chompie do? What would Skylar do?
I told myself: They would continue, is what they would do.
-dave