Cool as McCumber: Can I interest you in buying my cybersecurity insights?

June 15, 2018

Back about eighteen years ago, a popular cybersecurity group started a website that contained a list of industry charlatans, plagiarizers, and sundry technology scammers.  Our profession has been fertile ground for these grifters for many years, and capturing their faces and misdeeds has been a steady job.  Many people have decided to take shortcuts to fame and fortune, and are usually eventually called out.

Plagiarism alone could rack up pages of guilty parties I know.  As an author, technologist, and academician for nearly thirty years, I have had my numerous run-ins with plagiarism.  My favorite was a graduate student who plagiarized my own textbook in a report.  I am not sure what they were thinking.  I once was walking through a government office and saw a framed picture of one of my copyrighted works on the wall.  A major U.S. airline also tweeted out some of my material as their own.  I certainly don’t expect compensation, but I do expect appropriate attribution, so my response has always been to politely ask them to at least give me my due as an author.

Just last week, we had cybersecurity thought-leader and expert unmasked as a fraud.  I had just recently learned of him through my government circles.  He was a co-founder of what he and his partner called a “think tank”.  Apparently, setting up this business it was a good decision for them because they raised hundreds of thousands of dollars from the information security vendor community to boost the vendor companies’ marketing signal to politicians and high-dollar consultants. 

The “think tank” hosted lavish black-tie galas and events at swanky hotels in the DC area, featuring retired senior military officers and high-ranking government officials.  It is likely a few top speakers were paid for a presentation by the “think tank”, and once they were on the docket, the locals lined up to pay for the opportunity to hobnob with the Big Names.  These guys knew how to work the system.  That’s before the one co-founder (a self-described genius) had a chance online interaction with a reporter.    

Once a journalist started digging into this “expert’s” background, he found someone with a very shady business background who had simply changed his name and decided to make the jump to cybersecurity.  Now, many people have made career changes, so what makes this guy such a charlatan?  It appears he wrote many articles and a couple of self-published books.  You can debate how much time and effort you need to become an “expert”, but this guy’s rise was meteoric.

The journalist uncovered a web of Twitter bots and self-promotional materials all orchestrated by this person to amplify his presence in the industry.  He used this network to pose as other professionals who would heap praise on him for his genius, insight, and massive intellect.  It was all faked.

Like nearly everyone who tries this scam, his hubris and self-promotion got out of control.  He was introduced by his partner as a man who had written not a couple, but FIFTY books, and HUNDREDS of articles on cybersecurity.  He professed to actively consult for NATO, NSA, and MI6.  It was a few half-truths and a whole lot of lies with just enough of a façade to make it look legitimate. You must hand it to them for picking a profession where no one really vetted their claims until a chance encounter with someone on the internet.

We need to all make a better effort to look beyond the self-promotion and hyperbole. There is a lot of serious work we need to do.  We can start by shunning people like this.