Opens in a new tab
12 min 15 sec
Available in:English

Tribe of Hackers: Cybersecurity Advice from the Best Hackers in the World

Five working security experts explain why simple defenses beat big budgets, how to enter the field without a degree, what earns promotions, and which plain habits keep a home network safe.

Table of Content

Many security breaches start with something as ordinary as a weak password, and no product budget can buy that problem away. That blunt observation runs through Tribe of Hackers, in which Marcus J. Carey and Jennifer Jin gather advice from working security professionals such as Bruce Potter, Lesley Carhart, Ming Chow and Robert M. Lee and Jayson E. Street.

If the field looks closed to anyone without a computer science degree, or your own smart devices feel like a risk you cannot judge, these practitioners are reassuring. Across their answers, one argument keeps returning. Security works, for companies, for careers and for homes, when the basics are handled every time, people are trained well, and learning is driven by curiosity, with or without a diploma.

Their advice turns into habits a manager can bring to a team on Monday, a starting plan for anyone hoping to enter the field, and a short set of changes that make a household network far harder to break into.

Companies pour more money into security every year, yet the breaches keep coming. A university lecturer counts four reasons the spending fails, and a veteran security chief names the cheap measures most organizations still skip.

Employees who click bad links get called the weakest point in any company. One seasoned hacker thinks that label gets the problem backwards, and a teacher explains how to change what happens on an employee’s very first day.

Security folklore says the attacker is always one step ahead. The head of an industrial security firm disagrees, and his reasons involve the kind of people a company hires and how they talk to the business.

Many people who would thrive in security never apply because they think the entry ticket is a diploma. Three experts describe the routes they actually trust, including one cheap project you can build at home.

Brilliant technical people still get passed over, sometimes before they are even hired. The experts explain what separates those who rise from those who stall, and one of their answers has nothing to do with work.

Smart speakers, cameras and free apps can make any household feel exposed. The experts turn out to be calmer than the headlines, and their advice starts with a question most people never ask about their gadgets.

Security, as these practitioners describe it, looks much less like movie hacking and much more like steady housekeeping done by curious, decent people. Patches get applied. Two-factor gets switched on. New colleagues learn in their first week that a strange email deserves a second look, and nobody is mocked when a test catches them. The people who rise in the field are the ones who teach themselves, speak up in the community and make the hard call when an easier one is available.

Jayson Street’s picture of safes and safe crackers is the one to keep. No lock ends the contest, so the work is to hold risk at a level you can live with and keep adjusting. That frees you from two traps at once: the panic that every threat is a disaster, and the hope that one big purchase will make the problem disappear.

So begin where they would. Patch what you own and turn on two-factor today. If you want into the field, build a vulnerable server and break it. If you lead people, train them the way you would want to be trained. The best defense these experts know is ordinary work, repeated, by people who stay curious.

About this book

What is this book about?

Cybersecurity can look like a closed world of experts, giant budgets and constant danger. Marcus J. Carey and Jennifer Jin open it up by gathering advice from daily practitioners of the craft, including Bruce Potter, Ming Chow, Lesley Carhart and Robert M. Lee and Jayson E. Street. Their answers overlap in useful ways. Spending more does not stop breaches when weak passwords and unpatched software are still around. Users become a strong defense once they are properly trained. Defenders, Lee argues, can hold the advantage. A degree helps but is not required, while self-study, community involvement and hands-on practice matter a great deal. Promotions depend heavily on emotional intelligence, networking and the nerve to make hard decisions. Readers get a practical starting plan for a security career, a short list of habits any organization can adopt, and calm, specific steps for protecting a home full of connected devices.

Book Information

Rating:

Genre:

Career & Success, Technology & the Future

Topics:

Career Planning, Skill Building

Publisher:

Wiley

Language:

English

Narrator:

Evelyn

First published:

August 13, 2019

Pages:

304

Length:

12 min 15 sec

Get the book:

Amazon

Who it's for

  • Hoping to enter cybersecurity

    Career switchers and students who want into cybersecurity but lack a degree or certificates.

  • Deciding security priorities

    Team leads and managers deciding where security money and training time should go.

  • Households with smart devices

    Households full of smart devices that want simple, calm steps to protect their network.

Listen to Preview

About the Author

Marcus J. Carey

Marcus J. Carey created the Tribe of Hackers series. He began in cryptography in the U.S. Navy, earned a Master's degree in Network Security at Capitol College, and spent more than 20 years in penetration testing, incident response and digital forensics, including work for NSA, DC3, DIA and DARPA. He founded Threatcare, a security company in Austin later acquired by ReliaQuest, and mentors in the security community. Jennifer Jin studied Communication Studies at The University of Texas at Austin and served as Head of Communications at Threatcare, joining with no earlier cybersecurity background.

Ratings & Reviews

Ratings at a glance

3.7

Overall score based on 185 ratings.

What people think

Listeners find the suggestions in this book highly beneficial, and one listener notes it acts as an excellent guide for InfoSec professional paths. Furthermore, the work earns praise for its clarity, and listeners enjoy the wide variety of different contributors featured. They also value the information security material, with one listener describing the title as a fantastic tool for gaining perspective on the industry.

Top reviews

Vera

Finally got around to cracking this open and I am genuinely surprised by how much I enjoyed the informal, conversational tone. It perfectly captures that "hallway-con" energy where you’re just soaking up wisdom from veterans who have been in the trenches for decades. I loved seeing names like Ming Chow and Lesley Carhart sharing their paths; it really humanizes a field that often feels cold and inaccessible. The life hacks and book recommendations—especially The Cuckoo’s Egg—add a personal touch that makes the contributors feel like real people rather than just avatars of security. My only minor gripe is that the Kindle formatting is a bit wonky with the pull quotes, but the quality of the insights more than makes up for it. This is an essential reference for anyone who wants to understand the culture of the tribe.

Show more
Rapee

This book is basically a "Tribe of Mentors" specifically for the hacker community, and it works brilliantly. The diversity of the interviewees is its greatest strength, showcasing that the cybersecurity world is made up of people from all walks of life and academic backgrounds. I especially enjoyed the recurring mentions of Mr. Robot and how the pros view Hollywood’s portrayal of their craft. It’s a motivational powerhouse that reminds you why curiosity and perseverance are the most important tools in your arsenal. Some might find the repetition annoying, but I think it helps solidify the core principles that the industry agrees on. If you’re feeling burnt out or lost in your career, spending an hour with these "notable hackers" will definitely reignite your passion for the field. Truly a standout resource for the community.

Show more
Viroj

Ever wonder how the top minds in security stay ahead of the curve? This book gives you a front-row seat to their thought processes. The "bang-for-the-buck" section in each interview is gold, especially for business leaders who are tired of throwing money at blinky boxes that don't actually stop breaches. I loved how the authors included people with different specialties, from threat hunting to social engineering, which gives a holistic view of the ecosystem. It's a fantastic resource for insights into the field that you just won't find in a standard certification guide or a college textbook. The passion of the contributors is palpable, and their book recommendations have already filled up my "to-read" list for the next year. This is easily one of the most readable and engaging books in my technical library.

Show more
Chloe

As someone who is relatively new to the infosec scene, finding a roadmap that doesn't just focus on Python scripts or network protocols is incredibly refreshing. Marcus Carey has curated a diverse group of contributors who offer a bird's-eye view of what the industry actually looks like from the inside. While some of the responses feel a bit brief, the collective wisdom on how to climb the corporate ladder or decide between a degree and certifications is invaluable. I found myself highlighting the sections on interpersonal skills because technical talent alone clearly isn't enough in 2024. It’s less of a textbook and more of a mentor in your pocket, though the repetitive question format can get a little stale if you try to power through it in one sitting. Truth is, you’ll get the most value by jumping around to the names you recognize first.

Show more
Praepimon

The chapter on Robert M. Lee alone was worth the price of admission for me. His take on why defenders actually have the upper hand was a refreshing counter-narrative to the usual doom and gloom we hear in the news. Carey and Jin have done a great job gathering a wide variety of voices, proving there isn't just one way to "make it" in this industry. I particularly liked the focus on how to gain expertise without necessarily needing a pile of expensive certifications, which is a message more newcomers need to hear. My main criticism is that some of the "life hacks" are a bit cheesy and don't really add much to the professional discourse. Still, the practical tips for home network security and IoT devices are excellent for sharing with non-technical friends. It’s a strong compilation that manages to be both informative and easy to digest.

Show more
Isabella

To be fair, the diversity of contributors in this volume is impressive and provides a much-needed look at the human side of hacking. I was particularly struck by Jayson E. Street’s perspective on how we shouldn't blame users for security failures, but rather focus on better training and culture. It’s these kinds of philosophical shifts that make the book more than just a list of tips and tricks. The writing style is very approachable, making it a quick read even though it’s a thick book with seventy different voices. My one complaint is that a few of the interviewees give very short, almost dismissive answers to some of the more complex questions. However, the majority of the content is thoughtful and provides a great look at the various paths available in the field today.

Show more
Siriphen

Picked this up for a class I’m taking, and it’s honestly one of the more enjoyable "textbooks" I’ve had to buy. It’s not a dry technical manual; instead, it’s a collection of stories and advice that feels very authentic to the hacker subculture. I found the discussion around the necessity of college degrees versus self-study and community involvement to be particularly relevant to my current situation. The contributors aren't afraid to share their mistakes, which makes the whole "expert" persona feel much more grounded and relatable. While the 14-question format leads to some inevitable redundancy, the variety of personalities keeps it from becoming totally boring. It’s a great way to get a feel for the industry before you commit to a specific career path. Definitely worth having on your shelf as a reference.

Show more
Thitiwan

Look, the content here is solid but the presentation left me wanting a bit more editorial polish. While the diverse group of contributors provides a fantastic range of perspectives, the rigid interview format means you’re reading the same myths being debunked over and over again. To be fair, there is some great advice regarding two-factor authentication and the importance of soft skills, but you have to dig through a lot of fluff to find the real gems. It functions better as a coffee table book or a reference guide that you flip through occasionally rather than a book you read cover-to-cover. I appreciated the emphasis on "least privilege" and the reality check that more spending doesn't always equal fewer breaches. It’s an okay resource for beginners, but seasoned pros might find it a bit basic.

Show more
Malee

After hearing about "Tribe of Hackers" at several conferences, I had pretty high hopes for a deep dive into the industry. What I found was a bit more lightweight than I anticipated, as it’s essentially a transcript of several dozen written interviews. While it is a great reference for InfoSec careers, many of the answers feel recycled after you’ve read the first thirty chapters. You can definitely pick up on the "hallway-con" inspiration, which makes it feel very casual and accessible, but sometimes I wanted the authors to push back on the answers or ask for more detail. The advice to "be curious" is great, but it’s repeated so often it loses its impact by the end of the book. It’s a nice collection of viewpoints, but don’t expect a masterclass in technical security.

Show more
Gai

Not what I expected given the high praise this gets in Reddit threads and LinkedIn circles. I found the structure incredibly tedious because every single interviewee is asked the exact same 14 questions, leading to a massive amount of overlap in the answers. Frankly, after the tenth person tells you to watch Sneakers or WarGames, you start wondering why this couldn't have just been a condensed series of blog posts. The "hallway-con" vibe the authors were going for unfortunately translates to a lot of dry, repetitive text that lacks a cohesive narrative thread. If you are looking for deep technical insights or a structured learning path, you are going to be disappointed by the surface-level nature of these interviews. It feels more like a collection of profile pieces than a book that provides actionable cybersecurity training.

Show more
Show all reviews

Questions about this book

Marcus J. Carey and Jennifer Jin collect advice from working security professionals, and their answers converge on one point. Security succeeds through basics done consistently, such as patching and two-factor authentication, through well-trained people, and through constant, curiosity-driven learning. Bigger budgets and fancier products do not fix breaches caused by weak passwords, and attackers do not always hold the advantage when defenses are sound.

According to the experts in Tribe of Hackers, no. Lesley Carhart says a degree can help with hiring or promotion but is one of many routes, and degree programs alone will not teach everything. Ming Chow says the field needs no fancy equipment, only hard work, curiosity and hands-on practice. Robert M. Lee is largely self-taught and recommends free resources and continuous learning.

Ming Chow suggests setting up a deliberately vulnerable web server at home and practicing on it for real hands-on experience. Lesley Carhart recommends self-study combined with active involvement in the security community. Robert M. Lee advises using free learning resources and, for industrial control systems, finding work at utilities or industrial companies where practical experience comes with the job.

Lesley Carhart suggests questioning whether each smart device is needed and keeping such devices on a separate network from computers holding sensitive data, behind a firewall. Robert M. Lee recommends licensed software and two-factor authentication. Bruce Potter urges caution with device makers and free cloud services. Jayson E. Street says keeping systems patched protects you more than antivirus software.

Ming Chow argues that emotional intelligence and personality drive promotions once technical skills land the job. Lesley Carhart stresses networking and strong interview and résumé skills. Robert M. Lee recommends public speaking, writing papers and giving training. Bruce Potter values the ability to make tough decisions and follow through, and Jayson E. Street points to consistent, passionate work and curiosity.

AUDIO SUMMARY AVAILABLE

Listen to Tribe of Hackers in 15 minutes

Get the key ideas from Tribe of Hackers by Marcus J. Carey, plus 5,000+ more nonfiction titles.

  • 5,000+ titles
  • Listen as much as you want
  • 7-day free trial
  • Cancel anytime

Tribe of Hackers

Preview · Full summary 12 min 15 sec
Home

Discover

Open app

Log in