Tribe of Hackers: Cybersecurity Advice from the Best Hackers in the World
Five working security experts explain why simple defenses beat big budgets, how to enter the field without a degree, what earns promotions, and which plain habits keep a home network safe.

Table of Content
1. Introduction
1 min 01 sec
Many security breaches start with something as ordinary as a weak password, and no product budget can buy that problem away. That blunt observation runs through Tribe of Hackers, in which Marcus J. Carey and Jennifer Jin gather advice from working security professionals such as Bruce Potter, Lesley Carhart, Ming Chow and Robert M. Lee and Jayson E. Street.
If the field looks closed to anyone without a computer science degree, or your own smart devices feel like a risk you cannot judge, these practitioners are reassuring. Across their answers, one argument keeps returning. Security works, for companies, for careers and for homes, when the basics are handled every time, people are trained well, and learning is driven by curiosity, with or without a diploma.
Their advice turns into habits a manager can bring to a team on Monday, a starting plan for anyone hoping to enter the field, and a short set of changes that make a household network far harder to break into.
2. Fix the basics before buying more tools
1 min 50 sec
Companies pour more money into security every year, yet the breaches keep coming. A university lecturer counts four reasons the spending fails, and a veteran security chief names the cheap measures most organizations still skip.
3. Turn your staff into a line of defense
1 min 36 sec
Employees who click bad links get called the weakest point in any company. One seasoned hacker thinks that label gets the problem backwards, and a teacher explains how to change what happens on an employee’s very first day.
4. Defenders can win against attackers with the right strategy
1 min 36 sec
Security folklore says the attacker is always one step ahead. The head of an industrial security firm disagrees, and his reasons involve the kind of people a company hires and how they talk to the business.
5. Break into security without a degree
1 min 41 sec
Many people who would thrive in security never apply because they think the entry ticket is a diploma. Three experts describe the routes they actually trust, including one cheap project you can build at home.
6. Get promoted on judgment and people skills
1 min 45 sec
Brilliant technical people still get passed over, sometimes before they are even hired. The experts explain what separates those who rise from those who stall, and one of their answers has nothing to do with work.
7. A safer home network with a few habits
1 min 36 sec
Smart speakers, cameras and free apps can make any household feel exposed. The experts turn out to be calmer than the headlines, and their advice starts with a question most people never ask about their gadgets.
8. Conclusion
1 min 10 sec
Security, as these practitioners describe it, looks much less like movie hacking and much more like steady housekeeping done by curious, decent people. Patches get applied. Two-factor gets switched on. New colleagues learn in their first week that a strange email deserves a second look, and nobody is mocked when a test catches them. The people who rise in the field are the ones who teach themselves, speak up in the community and make the hard call when an easier one is available.
Jayson Street’s picture of safes and safe crackers is the one to keep. No lock ends the contest, so the work is to hold risk at a level you can live with and keep adjusting. That frees you from two traps at once: the panic that every threat is a disaster, and the hope that one big purchase will make the problem disappear.
So begin where they would. Patch what you own and turn on two-factor today. If you want into the field, build a vulnerable server and break it. If you lead people, train them the way you would want to be trained. The best defense these experts know is ordinary work, repeated, by people who stay curious.
About this book
What is this book about?
Cybersecurity can look like a closed world of experts, giant budgets and constant danger. Marcus J. Carey and Jennifer Jin open it up by gathering advice from daily practitioners of the craft, including Bruce Potter, Ming Chow, Lesley Carhart and Robert M. Lee and Jayson E. Street. Their answers overlap in useful ways. Spending more does not stop breaches when weak passwords and unpatched software are still around. Users become a strong defense once they are properly trained. Defenders, Lee argues, can hold the advantage. A degree helps but is not required, while self-study, community involvement and hands-on practice matter a great deal. Promotions depend heavily on emotional intelligence, networking and the nerve to make hard decisions. Readers get a practical starting plan for a security career, a short list of habits any organization can adopt, and calm, specific steps for protecting a home full of connected devices.
Book Information
Who it's for
Hoping to enter cybersecurity
Career switchers and students who want into cybersecurity but lack a degree or certificates.
Deciding security priorities
Team leads and managers deciding where security money and training time should go.
Households with smart devices
Households full of smart devices that want simple, calm steps to protect their network.
About the Author
Marcus J. Carey
Marcus J. Carey created the Tribe of Hackers series. He began in cryptography in the U.S. Navy, earned a Master's degree in Network Security at Capitol College, and spent more than 20 years in penetration testing, incident response and digital forensics, including work for NSA, DC3, DIA and DARPA. He founded Threatcare, a security company in Austin later acquired by ReliaQuest, and mentors in the security community. Jennifer Jin studied Communication Studies at The University of Texas at Austin and served as Head of Communications at Threatcare, joining with no earlier cybersecurity background.
Ratings & Reviews
Ratings at a glance
What people think
Listeners find the suggestions in this book highly beneficial, and one listener notes it acts as an excellent guide for InfoSec professional paths. Furthermore, the work earns praise for its clarity, and listeners enjoy the wide variety of different contributors featured. They also value the information security material, with one listener describing the title as a fantastic tool for gaining perspective on the industry.
Top reviews
Finally got around to cracking this open and I am genuinely surprised by how much I enjoyed the informal, conversational tone. It perfectly captures that "hallway-con" energy where you’re just soaking up wisdom from veterans who have been in the trenches for decades. I loved seeing names like Ming Chow and Lesley Carhart sharing their paths; it really humanizes a field that often feels cold and inaccessible. The life hacks and book recommendations—especially The Cuckoo’s Egg—add a personal touch that makes the contributors feel like real people rather than just avatars of security. My only minor gripe is that the Kindle formatting is a bit wonky with the pull quotes, but the quality of the insights more than makes up for it. This is an essential reference for anyone who wants to understand the culture of the tribe.
Show moreThis book is basically a "Tribe of Mentors" specifically for the hacker community, and it works brilliantly. The diversity of the interviewees is its greatest strength, showcasing that the cybersecurity world is made up of people from all walks of life and academic backgrounds. I especially enjoyed the recurring mentions of Mr. Robot and how the pros view Hollywood’s portrayal of their craft. It’s a motivational powerhouse that reminds you why curiosity and perseverance are the most important tools in your arsenal. Some might find the repetition annoying, but I think it helps solidify the core principles that the industry agrees on. If you’re feeling burnt out or lost in your career, spending an hour with these "notable hackers" will definitely reignite your passion for the field. Truly a standout resource for the community.
Show moreEver wonder how the top minds in security stay ahead of the curve? This book gives you a front-row seat to their thought processes. The "bang-for-the-buck" section in each interview is gold, especially for business leaders who are tired of throwing money at blinky boxes that don't actually stop breaches. I loved how the authors included people with different specialties, from threat hunting to social engineering, which gives a holistic view of the ecosystem. It's a fantastic resource for insights into the field that you just won't find in a standard certification guide or a college textbook. The passion of the contributors is palpable, and their book recommendations have already filled up my "to-read" list for the next year. This is easily one of the most readable and engaging books in my technical library.
Show moreAs someone who is relatively new to the infosec scene, finding a roadmap that doesn't just focus on Python scripts or network protocols is incredibly refreshing. Marcus Carey has curated a diverse group of contributors who offer a bird's-eye view of what the industry actually looks like from the inside. While some of the responses feel a bit brief, the collective wisdom on how to climb the corporate ladder or decide between a degree and certifications is invaluable. I found myself highlighting the sections on interpersonal skills because technical talent alone clearly isn't enough in 2024. It’s less of a textbook and more of a mentor in your pocket, though the repetitive question format can get a little stale if you try to power through it in one sitting. Truth is, you’ll get the most value by jumping around to the names you recognize first.
Show moreThe chapter on Robert M. Lee alone was worth the price of admission for me. His take on why defenders actually have the upper hand was a refreshing counter-narrative to the usual doom and gloom we hear in the news. Carey and Jin have done a great job gathering a wide variety of voices, proving there isn't just one way to "make it" in this industry. I particularly liked the focus on how to gain expertise without necessarily needing a pile of expensive certifications, which is a message more newcomers need to hear. My main criticism is that some of the "life hacks" are a bit cheesy and don't really add much to the professional discourse. Still, the practical tips for home network security and IoT devices are excellent for sharing with non-technical friends. It’s a strong compilation that manages to be both informative and easy to digest.
Show moreTo be fair, the diversity of contributors in this volume is impressive and provides a much-needed look at the human side of hacking. I was particularly struck by Jayson E. Street’s perspective on how we shouldn't blame users for security failures, but rather focus on better training and culture. It’s these kinds of philosophical shifts that make the book more than just a list of tips and tricks. The writing style is very approachable, making it a quick read even though it’s a thick book with seventy different voices. My one complaint is that a few of the interviewees give very short, almost dismissive answers to some of the more complex questions. However, the majority of the content is thoughtful and provides a great look at the various paths available in the field today.
Show morePicked this up for a class I’m taking, and it’s honestly one of the more enjoyable "textbooks" I’ve had to buy. It’s not a dry technical manual; instead, it’s a collection of stories and advice that feels very authentic to the hacker subculture. I found the discussion around the necessity of college degrees versus self-study and community involvement to be particularly relevant to my current situation. The contributors aren't afraid to share their mistakes, which makes the whole "expert" persona feel much more grounded and relatable. While the 14-question format leads to some inevitable redundancy, the variety of personalities keeps it from becoming totally boring. It’s a great way to get a feel for the industry before you commit to a specific career path. Definitely worth having on your shelf as a reference.
Show moreLook, the content here is solid but the presentation left me wanting a bit more editorial polish. While the diverse group of contributors provides a fantastic range of perspectives, the rigid interview format means you’re reading the same myths being debunked over and over again. To be fair, there is some great advice regarding two-factor authentication and the importance of soft skills, but you have to dig through a lot of fluff to find the real gems. It functions better as a coffee table book or a reference guide that you flip through occasionally rather than a book you read cover-to-cover. I appreciated the emphasis on "least privilege" and the reality check that more spending doesn't always equal fewer breaches. It’s an okay resource for beginners, but seasoned pros might find it a bit basic.
Show moreAfter hearing about "Tribe of Hackers" at several conferences, I had pretty high hopes for a deep dive into the industry. What I found was a bit more lightweight than I anticipated, as it’s essentially a transcript of several dozen written interviews. While it is a great reference for InfoSec careers, many of the answers feel recycled after you’ve read the first thirty chapters. You can definitely pick up on the "hallway-con" inspiration, which makes it feel very casual and accessible, but sometimes I wanted the authors to push back on the answers or ask for more detail. The advice to "be curious" is great, but it’s repeated so often it loses its impact by the end of the book. It’s a nice collection of viewpoints, but don’t expect a masterclass in technical security.
Show moreNot what I expected given the high praise this gets in Reddit threads and LinkedIn circles. I found the structure incredibly tedious because every single interviewee is asked the exact same 14 questions, leading to a massive amount of overlap in the answers. Frankly, after the tenth person tells you to watch Sneakers or WarGames, you start wondering why this couldn't have just been a condensed series of blog posts. The "hallway-con" vibe the authors were going for unfortunately translates to a lot of dry, repetitive text that lacks a cohesive narrative thread. If you are looking for deep technical insights or a structured learning path, you are going to be disappointed by the surface-level nature of these interviews. It feels more like a collection of profile pieces than a book that provides actionable cybersecurity training.
Show moreQuestions about this book
What is the main idea of Tribe of Hackers?
Marcus J. Carey and Jennifer Jin collect advice from working security professionals, and their answers converge on one point. Security succeeds through basics done consistently, such as patching and two-factor authentication, through well-trained people, and through constant, curiosity-driven learning. Bigger budgets and fancier products do not fix breaches caused by weak passwords, and attackers do not always hold the advantage when defenses are sound.
Do you need a degree to work in cybersecurity?
According to the experts in Tribe of Hackers, no. Lesley Carhart says a degree can help with hiring or promotion but is one of many routes, and degree programs alone will not teach everything. Ming Chow says the field needs no fancy equipment, only hard work, curiosity and hands-on practice. Robert M. Lee is largely self-taught and recommends free resources and continuous learning.
How can a beginner start learning cybersecurity?
Ming Chow suggests setting up a deliberately vulnerable web server at home and practicing on it for real hands-on experience. Lesley Carhart recommends self-study combined with active involvement in the security community. Robert M. Lee advises using free learning resources and, for industrial control systems, finding work at utilities or industrial companies where practical experience comes with the job.
How can I protect my home network, according to Tribe of Hackers?
Lesley Carhart suggests questioning whether each smart device is needed and keeping such devices on a separate network from computers holding sensitive data, behind a firewall. Robert M. Lee recommends licensed software and two-factor authentication. Bruce Potter urges caution with device makers and free cloud services. Jayson E. Street says keeping systems patched protects you more than antivirus software.
What skills help cybersecurity professionals get promoted?
Ming Chow argues that emotional intelligence and personality drive promotions once technical skills land the job. Lesley Carhart stresses networking and strong interview and résumé skills. Robert M. Lee recommends public speaking, writing papers and giving training. Bruce Potter values the ability to make tough decisions and follow through, and Jayson E. Street points to consistent, passionate work and curiosity.
Readers also enjoyed
AUDIO SUMMARY AVAILABLE
Listen to Tribe of Hackers in 15 minutes
Get the key ideas from Tribe of Hackers by Marcus J. Carey, plus 5,000+ more nonfiction titles.
- 5,000+ titles
- Listen as much as you want
- 7-day free trial
- Cancel anytime



















