https://stream.echo6.co/videos/watch/1f30dcd1-a2ce-4143-976a-d75b2b6a655b This is the third installment of my viewer Q&A videos, and it concludes the big batch of questions and answers that I recorded for you all this holiday season. I put the call out in very early December and an absolute flood of great questions came to me. It took me several hours to get through them all when I was back east visiting my family in Philadelphia. Hopefully these work well as a little holiday gift from me to all of you. I'm releasing the final element of this trilogy on Christmas Eve, after all! There will be plenty of additional Q&A videos in the future, I can tell... but for now, please enjoy all of this and know that it's been an absolute treat for me to put this together. Have a great holiday season and a safe, happy New Year! Questions, links, and more are down here in the doobly-doo. Enjoy! The "I love what you do... how can I do it, too?” blog post... https://deviating.net/words/?p=1096 My "Hacking a Security Career" talk from WWHF this past fall... https://www.youtube.com/watch?v=jZFuCYyQB6c (Continued from previous Q&A videos this holiday season) The “How to get started” Questions (I read a number of them all at once and then I tie the answers together) 00:34 - Coleman Cooler Guy Work in Cyber, Would love to get into PhysPenTesting. Company has zero interest in this, it seems, however. How would one break into this? Start my own firm? 00:55 - Timothy D How does one land a career? What does the path of progression look like? / The conundrum of “can’t get a job without experience, can’t get experience without a job” 01:33 - Matt D Just getting started in IT. what advice for certs, resources, places to get experience without getting arrested? 02:44 - Arizona Mage Wery interested in getting into Physical Pen (currently on patrols in the area) with decades of experience 03:25 - Dan S Are there schools or certifications in this space? Who would hire a new tester? 03:45 - Henry S Formal education or schools/certs? 07:18 - Jessie Where do I start if I am trying to make a serious attempt at breaking into physical pen-testing? Does The CORE Group offer any classes, training, or certification testings? 07:35 - Quinn from New Mexico Same kind of question 07:47 - Andrew F Big fan and you’ve steered me into this industry... Are there any certs in your field? 08:08 - Barholomew Bart Bartsterson Asking about career paths and has an offer for a bevvy if i am in town 08:47 - Mark S In Australia and is curious about migrating from the digital security world to the physical a bit more. 09:57 - Ethan How often do you get work and do you turn jobs down? 15:18 - follow-up from Ethan... who is 16 Is he an anomaly in my analytics? 17:14 - Albert Pen tests or assignments where your team was found out 20:56 - memento mori Asks what’s the worst thing to ever happen to my team and i on a pen test? Community / Diversity / And More 29:48 - Brad B What concrete actions do you think all of us should be taking to foster a more diverse set of voices in infosec (at work, at cons, in our communities, and/or on the dumpster fire that is social media)? I ask it earnestly because I always see you speaking out on this subject. I appreciate you using your voice to support women and minorities, and I'm sure lots of other folks do too! 44:10 - Amanda K You have such a wonderful singing voice. Have you ever sung professionally? How about a Christmas Carol for us? 45:53 - Aerin H Will I be at PAX? Up for a game? 49:24 - Heath L Ever used a handheld EMP device? NOTE: The winner of the key extractor tools has been chosen. By random selection (viewable here... https://www.youtube.com/watch?v=hodxdes8L78) the winner is Diosol. I have replied to them below and we'll hopefully connect soon. Nice work, everybody! Wed, 15 Apr 2026 13:58:54 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://stream.echo6.co https://stream.echo6.co/client/assets/images/icons/icon-512x512.png https://stream.echo6.co/videos/watch/1f30dcd1-a2ce-4143-976a-d75b2b6a655b All rights reserved, unless otherwise specified in the terms specified at https://stream.echo6.co/about and potential licenses granted by each content's rightholder.