SophSec - WtF?

With SophSec having released some code (well,..kinda ;), and having given a talk at ToorCon Seattle Beta, we've been asked "WtF are U, WtF do U do?". Good question.

We don't have a public business, we don't sell services, and our group motto is "Sketchy Shit, Competitive Prices". If we were a business, who would take us seriously? Even our name it self "SophSec" is a parody.. a parody of the bulk-sale snake-oil that manifests after some well funded assholes start a business using some shitty word with 'sec' in it, and calling it a Security Firm. This results in an organization that is devoid of talent, named "Clandestine-Sec Services", selling nothing more than a false sense of security. Ultimately these businesses end up giving those of us who are truly passionate about security a badname.

SophSec is just the opposite. We're trying to promote growth in the infosec field, sprinkled with a little bit of sketchy. We also serve as a front; we have an affiliate program for people who still want to work on cool security projects/PoCs/whatever without their name tied to it directly. In this way we almost operate like an intel agency, keeping the identity of our affilitates secret if they don't want to be known. At the end of the day, we're about getting shit done. Cool Shit. Movie hacker type shit. Word.