The Social Engineer

Successful entrepreneurs will tell you that if you are going to start a business in today's world your best bet would be a consulting business. Why? Its simple- the overhead is low and you can be self reliant. You are literally in control of what it is you do and don't do. The only tools you need are effort and the internet.

I always thought that where the money is depends on what people DEPEND on. For example- things that people will need forever like food, water, shelter. In a profit language- restaurant, sports drink/ alcohol, and real estate. But these markets are flooded and you need to have a product/ solution that is so new and innovative it would be a market disrupter.

Most people don't have that- so the next step in the process was for you to think of what you are good at. Its not necessarily important to be good at something popular, but a home-run if you are good at something you can make popular. The focus today seems to be on technology. Before technology was created it wasn't a necessity, not with the year of 2016 closing we see it everyday all around us as both a crutch as well as a solution that the entire globe has become dependent upon. In regards to creating business I don't think there is any other way to go for an easy start up rather than IT consulting.

I have tried to narrow it down even further and find out what it is that makes technology weak. Typically it is the security or the dependency upon the seamless functionality of the technology it self, but when it gets down to the overall weakness- and experts will agree, the weakness of technology is the users. People. We are the worst. In my opinion, a business centralized opinion, I view that as an opportunity. This is a great avenue for someone to explore an example - social engineering. Not in the sense to make benefit a criminal but instead to highlight to a business their key weaknesses so that they can then correct them and become less vulnerable to a real attack. I have taken many classes and gone from a student to someone that actually practices this regularly.

Not only is this fun to do, it can be extremely profitable. There are some companies that offer an "audit" similar to this but I haven't seen too many examples of companies that base their entire platforms around being good at this. I think this will be a large business in the future and would love to be a part of something like that. It's a win win. If you are successful in your breach and don't get caught you can create a report that instructs the institution on how they were vulnerable. If you weren't successful you are legally on site and they aren't vulnerable. Its a fantastic business model with little downside.