The Courage of Brian Krebs

Brian Krebs has been kind enough to compliment me on this blog a few times, telling me I have courage for writing about the demons. Today I celebrate Krebs’ courage, which is far more formidable than anything I could ever hope to possess.

Mood music:

For years at The Washington Post (which foolishly cut him loose) and more recently through Krebs on Security, the man has relentlessly investigated online crime and written scores of groundbreaking articles on his findings.

Hackers lurking deep in the bowels of the Internet’s seedy underbelly have good reason to hate Krebs’ guts. This is the guy who broke news of the recent Target breach, not to mention most of the other big security stories that went mainstream in recent memory.

And the bad guys aren’t happy. In the past they have:

  • Sent poop and heroin to Krebs’ doorstep
  • Stolen his identity half a dozen times
  • Targeted his website with withering denial-of-service attacks
  • Triggered a SWAT team raid on his home just as his mom was arriving for dinner

None of it has stopped Krebs.

As a journalist, I always envied the man. You could say I hated him as much as the black hats of the underground. Too many times to count, I had to follow up on news stories he broke for the sake of getting headlines on my employers’ sites. It always frustrated me that he could sniff out the tough stuff. It often made me feel inferior.

This was the typical newsroom conversation:

Editor: Did you see that Krebs post? We have to have something on that.

Me, in standard reporter denial mode: Fuck Krebs. He’s not writing about where the security industry is headed. All he writes about is the latest cybercrime.

Editor: Yeah, and he’s winning. Follow it up.

Me: Fuuuuuuuuck.

But in time, I came to appreciate and admire him. I even started to see him as a hero.

Though still a writer, I’m no longer a reporter chasing news, and that has allowed me to shed the last of the biases I may have held against Krebs.

Or, maybe more to the point, it allows me to admit something I probably wouldn’t have acknowledged in those earlier roles — I was jealous of the man’s tenacity and balls. Jealous with a capital J.

Krebs’ boldness has captured a lot of headlines lately, including this one in The New York Times, whose editors were probably delighted to remind The Washington Post of how stupid it was to fire him.

He has also received a lot of awards lately. Tuesday, for example, the Messaging, Malware and Mobile Anti-Abuse Working Group awarded him its M3AAWG Mary Litynski Award at the organization’s meeting Tuesday in San Francisco. In announcing it, the group said:

With an intense passion and impressive self-taught technical skill, investigative journalist Brian Krebs has persistently and courageously shed a rare light on the dark underbelly of the Internet that has resulted in the disruption or shutdown of innumerable cybercrime operations.

The award and comments are well earned.

Congrats, my friend. The world is a better place because you’re in it.

Brian KrebsKrebs at work. Photo by Daniel Rosenbaum/New York Times News Service

Proof That Mental Illness Needn’t Be A Career Killer

A few months back, I was interviewed for a Forbes article on people who turned their mental illnesses into a career strength. I’m happy to discover there are more success stories to share.

Mood music:

A good friend forwarded me “Why I Hired an Executive with a Mental Illness” by Rob Lachenauer, CEO and a co-founder of Banyan Family Business Advisors. Lachenauer describes hiring someone after a job interview in which the candidate came right out and told him she had a mental illness and was on medication. He writes:

My reaction to the candidate’s disclosure was, frankly, disbelief — disbelief that she found the courage to make herself so vulnerable before she was hired. She had to be interviewed by other members of the firm before I could invite her to join us, but we did hire her — and over the past few years, she has become not only a core member of our team, but a large part of the glue that holds the firm together.

He correctly points out that while The Americans with Disabilities Act of 1990 prevents employers from discriminating against people who have a mental illness, the discrimination still happens a lot. In fact, he notes, when he told a former VP of a major investment banking firm about his column, he warned him against publishing it. “Clients are afraid to work with firms that have mentally ill people on the professional staff,” the former VP told him.

I’m glad that didn’t stop Lachenauer from running with it, and I’m grateful he gave that job applicant a chance to prove herself.

I outed myself when I was already comfortably entrenched in my job, having proven myself a thousand times over. I still felt I was taking a risk by starting this blog, but my bosses and colleagues turned out to be very supportive.

By the time I interviewed for my current job, the blog was already well known in the industry. My current boss had been reading my work by that point, and my continued blogging about life with OCD, depression and anxiety was not an item up for debate.

I’ve been fortunate, and I’m happy to see, through stories like Lachenauer’s, that the needle continues to move in the right direction.

leader

Wherein I Run Afoul Of The U.S. Secret Service

My resolve against the inner demons is tested regularly.

Some are little tests, like being put in a room with all the food and alcohol I once binged on daily to see if I can resist the temptation.

Some are bigger tests, like getting lost en route to Washington D.C a few years ago with my wife and kids in the car. Getting lost in a car used to be the stuff my anxiety attacks were made of.

Then there are the huge tests, like the time I got an unexpected grilling from two U.S. Secret Service officers — incidentally, the day after getting lost on the interstate somewhere in New Jersey.

Mood music: 

[spotify:track:3ckQ5LMB0ORA45X0ozu9eR]

I wrote a full account of the encounter for CSOonline.com in “What it’s like to be grilled by the Secret Service,” so I won’t repeat it all here. That column captures it from a security perspective.

Here I’ll focus on the emotional part.

First, the gist of what happened: I was taking photos from my BlackBerry of Marine One (with President Obama aboard) taking off from the White House South Lawn. I guess I lingered there for too long, because the Secret Service thought I was taking surveillance photos. Two Android smartphones later, I’m amused they found BlackBerry-quality photos threatening.

One of them was pretty tough and didn’t believe my honest protests that I was just taking pictures and walking around there because I’m a White House history buff. One officer played bad cop, grilling me as if I were just caught red-handed robbing a bank. The other guy played the reassuring role. “We’re just going to get one of these for our records,” he cooed as he snapped a picture of my unshaven face.

Apparently nobody ever showed them the picture of the Brenners visiting the West Wing three months earlier. They did note that I was texting a lot as I walked, and they wanted to know who I was texting. When I told them it was Howard Schmidt, President Obama’s then-cybersecurity advisor, it knocked them off stride. I told them I was making dinner plans with Howard, that I was buying him dinner to thank him for giving me, the wife and kids the West Wing tour.

“Why didn’t you tell us that in the first place?” the meaner of the two cops asked.

As I told Howard what happened over burgers that evening, he had a good laugh.

I didn’t fault the Secret Service cops at the time. It’s not their job to know these things. It’s their job to nail terrorist activity when they see it. Could he have been a bit nicer to me, given that I was doing nothing wrong and all? Sure. But I try not to hold grudges.

It does say something about how much of a police state we’ve become in the decade-plus since 9-11, though. I also admit that if I could do it again, I’d be more belligerent. Government’s excessive reach into our lives has been laid bare since then. If I knew then what I know now, I would have been far more outraged.

Truth be told, the experience did freak me out. My back went into spasms and my hands shook for hours after. As they were in my face accusing me of running a terrorist surveillance mission, I was thinking to myself, “If these assholes haul me in, it’s really going to screw up the work I had planned for this afternoon.” I’m a typical OCD case, worrying that getting arrested will screw up the work day.

But it’s all good.

I didn’t go back to my hotel room and order $80 worth of food and a bottle of wine to comfort myself. A few years ago, a friendly encounter with Secret Service would have made me do that.

My mind wasn’t paralyzed, either. I got a lot of work done back at the hotel, even with the headache.

And hell, I got a pretty good column out of the experience.

Secret-Service-agents-death-investigated

The First Victim of 9/11

I’ve been studying up on Akamai Technologies’s history since starting work in the InfoSec department earlier this month. One of the coolest and most moving lessons has been a study of company co-founder Danny Lewin, who died aboard Flight 11 on 9/11 when terrorists drove it into the north tower of the World Trade Center.

Mood music:

Lewin is actually considered the first casualty of that terrible day because he was killed during an attempt to stop the hijacking. I wrote about it in “InfoSec Central To Lewin’s Legacy” in the Akamai Blog. Check it out!

Thanks.

Daniel M. Lewin

Julian Assange: Autistic Hacker Or Just An A-hole?

Last year I wrote a post about a report suggesting autism is an affliction of the brilliant. One man mentioned as an example was WikiLeaks founder Julian Assange, who has described himself as having the “hacker’s disease.” Yesterday, a reader’s comment inspired me to revisit the issue.

Mood music:

[spotify:track:74Tgft8pxSCO0nkf4uxiM4]

The reader said in part:

This compares a neurological disorder to genius people whose curiosity takes finite state machines to places that their creators never imagined. How’s that? Julian (who I met once) is an egomaniac and an arrogant prick, and Daniel (who I do know) and the rest of them have given him the Heisman. If he’s representative of hackers, then I’m cancelling my membership! Kids have always been a PITA for parents, especially ones that “won’t behave”. First it was “hyperactive” – then it was “ADD” then “ADHD”. It’s always some excuse for f**ked up parents who hit their kids, kids who are too smart and see through their parents’ bullshit.

 

A friend in the security community once took me to task for using the autism angle because he felt it was unfair to compare someone with a neurological disorder with me and my OCD struggle. He was right that the two are vastly different things, but for me it wasn’t simply about comparing myself with someone who has autism. It was more about my interest in people who have abilities within them, diseases and disorders be damned.

We’ve seen countless stories about people who rise above physical and mental limitations to achieve greatness, and I’m always inspired after hearing about them.

As for the reader’s comment, I agree with one thing: A lot of parents do make excuses for kids who don’t fall in line, and that often leads to a misguided diagnosis. But that’s beside the point.

Is something like autism a hacker’s disease? I have no idea. Frankly, I don’t care.

Each of us has something from within that can either hold us back or propel us forward: A blessing hidden inside a perceived curse.  That’s what OCD has been for me: A curse when left to rage out of control, and a blessing when managed and properly harnessed.

Some of us are afflicted with disorders that can’t be managed so easily; maladies that force people into wheelchairs or psychiatric hospitals. The victim has little control over it, and is trapped. For some, the affliction attacks the nerves and muscles. For others, the disease targets the brain and disables basic functions. In both cases, all or part of the brain still burns brightly, and the individual is able to ride that to something good. Like Stephen Hawking. And, in some cases, like hackers.

The one constant is that we’re all handed challenges in life. If the mind works, what matters from there are the choices we make and the lengths we’re willing to travel to rise above.

RIP, Renee Pelletier Costa

This morning I received the sad news that Renee Pelletier Costa passed away after a long and courageous battle against cancer.

Mood music:

[spotify:track:3UjJmliWxuobgMSdX5bN3R]

Updates: 

Renee’s memorial service will be held Saturday, March 23, 1:30 at Faith Lutheran Church, 360 South Main St., Andover MA 01810

In lieu of flowers, donations can be made to the:
Renee L. Costa Memorial Fund, account #8371787589
Care of: TD Bank
280 Main Street
Groveland, MA 01834 or any local TD Bank branch.

Meanwhile, a new site called “Live Like Renee” has been established to raise funds for her family.

***

The last time I saw her was over the summer, when she dropped off a huge collection of Legos her children had outgrown. She made Sean and Duncan very happy that day, and I think it reflects her life pretty well. In the short time I knew her, that simple kindness was evident.

She touched many lives in her short time on this Earth. For me, she offered an everlasting example of living in the face of immense suffering. It always floored me how positive and giving she was even as she was slowly losing to cancer. “Losing” might not be the right word, though. She did, after all, live with cancer for the better part of a decade. She certainly lived longer than she was expected to.

What follows is something I wrote about her more than a year ago. I think the sentiments ring especially true now.

My deepest condolences to Renee’s husband, children, friends and extended family.

***

Oct. 20, 2011:

Renee Pelletier Costa of Haverhill starts another round of chemo today. She’s been very public about her battle with cancer, and has been a sturdy, shining example of how to live in the face of adversity.

Cancer has put her body through the wringer, but has failed to stop her positive attitude and sense of humor. On Facebook this morning, she wrote:

“I begin chemo again at 9:30. Sean says he’ll go with me and stay long enough to make sure I don’t die from anaphylaxis, then he’ll go to work. That’s how it goes when this becomes old hat.”

Judging from the responses to that comment, she has a strong circle of cancer-fighting friends. That’s one of the strange things about terrible diseases. You gain friends you never would have met if not for the sickness.

She also has a lot of friends around here who are rooting for her.

But you can never have enough prayers in times like these, so please take a moment and do your part.

Thanks.

Renee

Fatherhood Saved Ozzy, Eddie & Me

Yesterday I watched the “God Bless Ozzy Osbourne” documentary, which focused heavily on how his addictions maimed him and his family over four decades. Though my addictive behavior pales by comparison, it still struck a chord.

Mood music:

[spotify:track:6xb9RiyqpDXWF4wUYPDwI2]

What hit me deepest is how Ozzy finally decided to get real sobriety after his son Jack had kicked drugs and alcohol. It took his son to show him the light.

There’s a similar plot in the recent comeback of Van Halen. Armed with the knowledge that he’d be able to make music with his son if he cleaned up, Edward Van Halen finally got sober a few years ago.

The son showing dad the light theme is an old one. It’s the whole “Luke Skywalker helping Darth Vader find his good side again” story. Only in the real life examples, the fathers get to live after having their epiphany.

In the documentary, we see Ozzy changing into a different, crazy person who continuously brings heartbreak to his family — especially his children. The daughter from his first marriage is asked point-blank if he was a good Dad. Her answer is a simple “No.” We learn — though it’s not really a surprise, given how incoherent he was in all the episodes — how his alcoholism was at its worst during the run of “The Osbournes” and how his youngest kids started using in that period. Finally, we see his son Jack deciding to clean up, inspiring his father to do the same.

Like I said, my addictive personality didn’t come close to the levels of Ozzy Osbourne or Edward Van Halen. But it was bad enough that I can relate to things like being useless on the couch when my kids needed me. I was never that way all the time, and I’ve been a pretty active Dad more often than not. But I am guilty of those bad moments.

But what I relate to most is how it took becoming a parent to drive home the need for me to be a better man and reign in my demons — the OCD and addictive behavior    that was a byproduct of constant fear, anxiety and exhaustion.

It wasn’t an instant thing — Sean was almost 4 and Duncan was was barely 2 when I realized things were not right in my head — but the cattle prod was definitely my hunger to be a better parent.

So yeah, I have to say I’m inspired by these rock n’ roll stories.

Addiction — And Security Journalism — Showed Me That Anonymity Matters

Journalists like me have never been particularly comfortable using anonymous sources. When you don’t name names, someone inevitably questions if your source is real or imagined.

But after dealing with some addictions in recent years, I feel differently about it.

Mood music:

There are some important distinctions to be made from the outset: I’ve written opinion pieces in my day job as a security journalist that have been critical of the hacker group Anonymous for hiding their identities while doing damage to others.

Going behind a mask so you can launch protests is fine with me, because honesty can be difficult when you fear the FBI agents at the door. I’ve been specifically critical of cases where I thought their actions had harmed innocent bystanders. In cases where innocents are hurt, hiding behind a mask makes you a coward, in my opinion.

That aside, we do live in a world where speaking your mind will get you blackballed, investigated or unfriended and unfollowed — if the latter two matter to you.

In one example where we were covering a data breach, a former employee wanted to tell us what really went on in the lead-up to the breach. But the person didn’t want their name used for fear that the company would try to sue them or hurt their chances of landing future employment. I agreed. A few days later, the person decided not to tell their story because people still in the company were snooping around the LinkedIn profiles of former employees. I can’t say I blame the person.

Indeed, covering security has made me understand the importance of anonymity compared to my experiences in community journalism.

But my experiences with addiction are what truly brought the importance of anonymity home for me.

Though I chose to tell everyone about my dependence on binge eating and, to a lesser extent, pain pills and alcohol, I’ve met a lot of people in OA and AA who never, ever would have started dealing with their demons if they had to do so publicly  — in front of friends, family and workmates. The prospect of being blackballed, fired or worse would have kept them on the same path to self destruction.

But because they can go somewhere where everyone is going through the same ugliness and not have their names exposed, they can be brutally honest about themselves and take those few extra steps to get help.

It would be nice if we lived in a world where everyone honored naked honesty. But as Ice-T once rapped in a Body Count song: “Shit ain’t like that. It’s real fucked up.”

I was lucky. I was able to out myself and my demons without getting blackballed. It’s been an immensely positive experience. But you can’t always depend on the loving, respectful response I got.

In that environment, if anonymity can help a few more people get at the truth about themselves and the world they live in, then let it be.

When The Going Gets Tough, I Disconnect

I’m leaving my weekly therapy sessions with a headache these days, because I’m working through another deeply embedded flaw in my soul.

Mood music:

http://youtu.be/louQ7s1ZkGU

It’s not nearly as bad as the therapy I had in 2004-2006, when I had to endlessly churn the sewage of my childhood memories in search of clues on what was wrong with me and how I got that way. Back then, I didn’t know myself very well. Now I do.

Knowing myself as I do, I’ve started to zero in on the ongoing flaws that hold me back and hurt loved ones. That apparently requires a few more trips to the sewer.

I’ll give you a fuller account further along in this process. For now, let’s just say I have a wall I tend to hide behind when the going gets tough. This wouldn’t be much of a problem if not for the fact that life is ALWAYS tough. Not just for me, but for everyone. We all have our Crosses to carry and difficulties to endure. In my case, it’s a lot harder with a wall in the way.

So here we are again. Back in the mental sewer. I know my way around now, but the stench can still be too much to take.

The first question from the therapist was if I had talked to my mother lately. No, I told him. I thought Mom and I were making progress in December, but she couldn’t handle this blog and went off the deep end. I won’t defend myself. She’s entitled to her point of view. But let’s just say I was hoping to be writing posts by now about how we were reconciling.

So no, I told him. We’re not talking.

Then he asked about how I handled my brother’s death when I was 13. I told him I pretty much disconnected from the world. Same thing after my best friend killed himself in 1996.

“You’re starting to see the pattern?” the therapist asked.

Yeah. When the going gets tough, I disconnect. The bigger events caused that self-defense mechanism to take root all those years ago. But it kicks in during life’s more routine challenges. And when the wall goes up, my anger level kicks up a few decibels. I don’t do what I did in my teens and 20s: Throwing furniture through walls and plotting endless ways to find those who hurt me so I could hurt them back.

I’m not THAT guy anymore. But I do still get angry. When I do, I turn in on myself and brood.

But I knew that already.

Now the question is, what to I do about it?

I love my life now, and I’m blessed beyond measure. But the better my life gets, the more of an eyesore the wall becomes. It’s got to go.

My therapist has seen this stuff before. He knows the wall is rooted in the memory sewer.

So I guess I’ll be here for awhile longer.

Small Victories

Duncan and I took my father on a little walk around Deer Island yesterday. Dad still struggles from the stroke he had last year, but days like yesterday I admire his fighting spirit.

Mood music:

http://youtu.be/Mi_Tm_g6KdA

I’ve been reluctant to take him on long walks, mainly because I don’t want him taking a nasty spill on my watch. But it was a beautiful spring day and he was eager, so who was I to argue?

Deer Island is an interesting place. One of the nastiest prisons in Massachusetts history used to be there. Now it’s the site of a massive water treatment plant — the facility credited with making Boston Harbor far cleaner than it was in past decades, when raw sewage used to get pumped into the harbor.

Dad moved slowly, but he was steady. He was telling us about the new tennis balls he just put on his walker. By the end of the walk, those tennis balls were toast, dragged to tatters.

Duncan enjoyed walking on the rocks, and spent the time talking about coordinates — something he is currently learning about.

We had to take frequent rests, as Dad can only take so much at once. But he was determined to go at least a mile.

Dad struggled toward the end, stopping every few feet. When it was over, he collapsed into the passenger seat of my car. But by then, he had gone more than a mile.

Not bad for a guy who needed a wheelchair to get around just a few short months ago.

Sometimes, it’s the smallest victories that count the most.