To my great surprise, young people now somewhat frequently contact me in order to solicit career advice.
They are usually in college or highschool, and want to know what the best next steps are for a career in
security or software development.
This is, honestly, a really complicated question, mostly because I’m usually concerned that the question
itself might be the wrong one to be asking. What I want to say, more often than not, is something along
the lines of don’t do it; when I got out of highschool and focused on the answer to that same
question, it was very nearly one of the biggest mistakes of my life.
Since I get these inquiries fairly regularly, I thought I’d write something here that I can use as a sort
of canonical starting point for a response.