Ouch (or how to really cause brain damage)

Now as I began to type this a week ago yesterday, I sat in seat 11B, onboard NWA flight 1294. Non-stop service to Dulles International Airport. I was on my way, 2 days after passing my GSEC, to attend the CISSP boot camp. After boot camp, I would be taking my exam either the Saturday after (November 15th), or in December. In the seat behind me sat Batman’s disowned son, RW. He was with the Help Desk when I first started down there 4 years ago. He went up to work for 1 of the 2 most dangerous people I know (Yes, G, you) about the same time I was brought on full time at the desk. Our flight landed about 1030EDT. We went to our respective rental companies, then respective hotels. He got a Hyundai. I was originally given a Mazda 5 (read: mini-minivan). I asked if there was something else. They gave me a “more suitable car” instead (hooray for free upgrades). By the time I was settled in, it was close to 1AM.

This week was brutal. Class started Sunday and ended Thursday. Our instructor, John “Hack” Hackmeyer1, was just fantastic. HUGE props to him for presenting a MASSIVE amount of data in a short time, clearly and concisely. Class was just awesome, albeit tough.

Now, I can tell you how to craft a packet using hping. I can tell you how to find rogue APs, and how to blank an admin password on a windows box. Most of that stuff is covered under the SANS bodies of study (GSEC, GPEN, etc).

XKCD.com

What I couldn’t tell you was how to properly equate an SLE (AV*EF), or how the ALE (SLE*ARO) is used in Risk Assesment and how the CBA affects the decision. Nor could I tell you, off the top of my head, the inner workings of DES (Symmetric, uses DEA as its algorithm, based off of IBM’s Lucifer algorithm. Weak due to small keyspace) or that RSA factors 2 large prime numbers (Broken Glass analogy).

Those are some of the nuggets that I was tested on for the CISSP. Just a couple of the many in their “CBK”. I studied my butt off, but still didn’t know it all. The exam started, officially, at 912AM EDT. Was I prepared? No. Was I ready? Maybe. Do I think I passed? Absolutely. I had all the answers to the exam. In fact, they gave them all to me. They just obfuscated2 them with 3 wrong ones.

I walked out of the exam at 247PM EDT, feeling pretty good. I didn’t “kick its a**”, as Hack would say. But it didn’t kick mine (as RW said). I felt good about it. I think the hardest part of it is now going to be the wait. It will be at least 2 weeks before we hear anything. Since the end of those 2 weeks falls on a holiday, it won’t be til December now.

XKCD.com

And so here I sit, again, in seat 11B, onboard NWA flight 1263. Non-stop service to Minneapolis-St Paul International. RW sits across the aisle on this flight. We’re both uncertain, but feeling the same. Our conversation bounced from what we’ve learned to completely unrelated things that guys discuss, and back again. Anyone listening in would have been thoroughly confused. We landed at 715CDT and parted ways.

It has been one massive week. A blur. A real butt kicker. My mind is now mush. I am exhausted, nervous and even frustrated. But the biggest thing I was feeling was excitement. I hadn’t held my daughter or kissed my wife in 7 days. I have alot of time to make up before I get back to the office.

And now its the morning after as I finish this up. Just missed dd by 30 minutes or so last night. Got to sneak in twice to give her a kiss. Just amazing. About 330AM, she requested food. I got up with her, as did mommy. When she saw me, she just lit up. So very very cool. I changed her as she giggled. But since I lack the necessary anatomical requirements, mommy handled the feeding. But this morning, she’s all mine. I fed her again about 730, and we’re just hanging out.

It seems that in the week I’ve been gone, she has learned so much more than I. My learning was very focused. A particular subset of things, all related in one way or another to an ultimate goal: IT Security.

DD, on the other hand, has learned just a wee bit more about life. I am humbled.

  1. breaking the name thing here, but he truly deserves the plug. Just an awesome instructor, really. If your company needs advanced IT training, contact him. []
  2. dad: otherwise tasked? []

Leave a Reply