So I do business these days

[Pekka]

or just started.

Got fed up with the promises of raises that never came. Got fed up with the fact that my contract was not respected upon, and my salary never got above what I was promised in the damn job interview. And even that promise was LOW because academia doesn't pay. Got fed up with my credit running up, not being able to buy clothes, but just food and necessities. Got fed up with the bureaucracy, got fed up with the demands that I do more and more, get paid the same, don't receive my supposed benefits even. Most promises were broken by my employer. Got fed up.

So. Started my own business then. I still do research though, I have a PhD to finish. Anyways, I have my first contract and I'm looking to get some more soon. I'll be giving a talk in India in July, after that I'll take a 2 week vacation there and contact our local government export people, to set up some opportunities to make some pitches to do some security awareness training for certain type of call center folks. After that I'm coming to the US, west coast. I'll be giving a talk in there as well, and after that I'm hoping to get some people interested in hiring my services. I do top level simulated attacks, both via network and physical intrusion (aka social engineering).

My strong points, that separates me from competition is that I actually do have methodology, I've personally done and keep doing research on the topic, and I am definitely in the very top of knowledgable people in this topic. For example, my research is the first actual scientific one, based on theories and supported by empirical evidence. That is, I don't do black magic, I have actual processes, that are measurable. I can tell you the impact. All services are also based on the economic factor, meaning that they are customized to fit the customer context and it's not just some babble. This is, as far as I know, the thing not a single other company does. I can attack certain places, people, targets, policies or what ever we want, measure the impact of the attack and follow up with a plan to fix the situation. SOmetimes it does not need a fixing. Sometimes the fixing is too costly. Sometimes it's the thing to do, based on value creation. Basically using models that are a bit more advanced than, for example, cost-benefit analysis.

So these services are customized, definitely top level, and come up with training afterwards, which is also measured for it's effectiveness, as in did it work well enough or not. Now I'm tired of typing this dada, the point is, I do offer something else than consultants. NOne of this is based on some ISO standard crap, or best practices diarrhea. So if you guys know anyone or have connections, let me know. For a materialized deal, com(m?)ission definitely given. Simulated attacks and training for staff given. In context, customized and all actions are based on value, in other terms return on investment.

What else? Uhm. Life is pretty good. Still work too much, but hey, for myself now. I feel free, even though I'm personally responsible for everything. Then again, I know what I offer is something no one else does, and I definitely give the best value there is. I hope my stomach can handle India. I'm expecting to close at least 2 deals in the US before August, so get moving!

What's happening with you guys? Is Obama still the president?

[ZEE]

[BeBMan]

[Pekka]

YEah, beer... not. Haven't had a drop of alcohol in... this year. Today I actually wanted e beer. I really wanted it, but I had to pick up my mom from the airport, who is visiting us this weekend. Which is cool

[Japher]

How's the gf?

Work has finally started to pick up, seems the Canadians have started throwing money range fuels/biofuels etc. so we've been getting a few contracts and a few that we've been sitting on have been stoked. Though, who wants to go to Edmonton?

Anyway, just took two Finals... 65% done with my MBA. Then?


Oh, and congrats on your new venture, and good luck.

[Ben Kenobi]

Nothing better then self-employment.

[DaShi]

By business, do you mean that you have a staff working for you, or are you doing it freelance for yourself with plans of expanding into a fully staffed operation?

[-Jrabbit]

Congrats, Pekka! Definitely the way to go.

Welcome to the brotherhood of the self-employed.

Great to see you here.

[Pekka]

Japher, gf is OK, we moved in together in my small apartment

dashi, so far it's only me, because it allows me to do certain business functions and do tax deductions to my benefit and also keeps me away from most of the time consuming things that I'd have to buy services for, like accounting, legal services etc. Now I'm keeping it simple. I do have two professionals ready when I incorporate it. They want to be in it, but I still smooch every single benefit that this form of company can get. Basically I'll be getting a loan soon, but I do have people ready to become staff.

Asher, Here's some rambling, if you're really interested, I can give you a decent and short description and more in depth information if you want, but would be private so here we go (ask for a PM):

"We" are best at is social engineering and phishing prevention. But while doing this, we take a deep look at the company, we need to see their security policies, know about their strategy, security investments etc... we take all this into account when planning what should be tested, how and what the intensity will be. It makes NO sense what most do, which is totally ad hoc, and some James Bond wannabe steals documents or whatever by being so clever, that they had no chance anyway. This isn't beneficial for anyone. Of course you can walk into a company and start stealing documents, it doesn't even require lots of skills. These same people often talk about how they are experts in hypnosis and stuff like that. You get my point? So then you give your report to the client, "look, we took everything and it was easy. You're screwed!"

And what will the company do then? It's not constructive at all, and the fact is, most companies have bad policies, some of them don't have policies at all, let alone that those policies would be communicated to the staff, or better yet, trained. So to do a full on spy assault is totally useless. Then you take other things into account, like their strategy and what their bottom line is, their functions and processes, as you want to be supporting those and not making new barriers, see their investments and risk appetite, talk to their CIOs, and soon you can actually have a systematic security testing, that tests the clients true needs. And they get a report that is useful, as now you know where the biggest problems are in their context, and we always look at things that give the best positive impact with the lowest possible price (knowing their investment trends), most often it is actually free. Sorry, got myself babbling again.

Our "bottom line" is information security management issues. And not confused with the mass of consultants in this very same business. We do not come and talk about general things, we investigate first and then come to talk about your things. There is a big difference right there. And the methodologies affords us measurability, that is valid, measured in terms if controlling risks and money. Not "95% of people fell for our trick". Which is totally useless information, yet that's the best you'll get from others. So this and of course awareness training.

In short, I can't really give much more, as they would be business secrets. But if you want to get a taste, I can private message you. My problem is, I know this field very well. I don't think there's many people out there who would know more. There's people out there, making tons of money by less skill and service. But my business skills aren't that good. That's a problem.

[Pekka]

An insult of the day arrived

Like a week ago we came to an agreement that I should be paid for OT, because I've done it and a lot. Because I have to, there's so much things to do and deadlines are quite demanding, and when you're involved in 3 separate things, well... so anyway, I told my boss that look, I'm really suffering economically here, this is a joke, and even though I like this thing I'm doing here, it's impossible. I'm just a tad above poverty line and I work like a mad man. I can't support myself with this salary anymore, I'm running up my credit if I want to buy like clothes and stuff. Unacceptable. Plus I was promised raises many times before that never came.

So I asked for a permission to get another job. Which kind of is a joke. I already have work worth of 2,5 jobs right here, but only one pay. So, if you do that, ask for a permission to have other income, my boss has to sign this paper that goes to the HR. And they question you why you're taking another job, right?

So, he was like no, I'll get you that raise. I'll pay you for the OT. And it's going to be good OT money as well after that raise, yes?

OK. Few weeks pass, and the raise issue seems to be sort of forgotten. I'm still hurting and could have gotten another job to help my next month. So that actually set me back, since I thought I'd get this money, right? Didn't get it. So last week we arrived to an agreement AFTER I said listen, give me a permission to do another job, this situation is still the same and the things you promise don't seem to hold water.

So then he's like... well you did lots of OT in the past already, we could pay you for that right now. We'll make this... compensation. So we agreed that's OK. I calculated that I should get 1800 euros just for that. So I just came back, submitting my compensation application, and whoops, it's based on my base salary. Guess how much I get for 60 hours OT, all on weekends and nights? 770 euros, minus taxes. A lousy 400 euros for 60 hours OT. I guess that makes it all up, eh?

Well, today I'm meeting with the head of the HR. Not only is my employer in breach of contract, it's been so for the last 18 months. All promises have been broken when it comes to my salary and benefits. Think how much benefits you'll get from a University? Yeah, that's not much, and when that's taken away from you, you'll start your own company, make millions and buy a bulldozer to park it in the parking lot for staff, a big yellow/brown bulldozer, just to make that parking lot ugly. This is the norm here. You are promised what you deserve and then when the job is done the prize goes away.

Anyways, I bring in money to this thing, the services I do here now for our clients is substantial. Why should I do it for an insult of a salary, when I can just do it directly, and get paid accordingly?

[Dinner]

I feel very happy that I am now making $75,000 per year plus bonuses plus overtime and I laugh at people who make less. If you don't make six figures then you aren't trying very hard. Study a real science mother ****er and then maybe you can afford to live in a highly desirable area.

[Dinner]

I like how much I make and how much I live with. Long live Obama.

[Theben]

Supercitizen Industries?

[Japher]

That's pretty shabby for San Diego.

[Supr49er]

Pekka, congratulations and good luck with your own business.