Goodness

Building web systems. Breaking them ethically. Focused on maritime cybersecurity, penetration testing, and security standards (ISO/IEC, NIST).

[Goodness @_99Good]

My degree is in Marine Geoscience.

I spent years studying ocean floor mapping, sonar systems, and deep-sea data analysis.

People think that has nothing to do with cybersecurity.

They're wrong.

Here's why ocean science is actually elite prep for hacking 🧵🌊

[Goodness @_99Good]

@web3righteous 🌟

[Goodness @_99Good]

@web3righteous Gm

[Goodness @_99Good]

Scientific thinking, anomaly detection, rigorous documentation — these transfer directly to cybersecurity.

The bridge just hasn't been built yet.

[Goodness @_99Good]

My degree is in Marine Geoscience.

I spent years studying ocean floor mapping, sonar systems, and deep-sea data analysis.

People think that has nothing to do with cybersecurity.

They're wrong.

Here's why ocean science is actually elite prep for hacking 🧵🌊

[Goodness @_99Good]

3/ And we know infrastructure everyone else forgets.

Ports. Vessels. Subsea cables. Offshore platforms.

95% of internet traffic runs under the ocean. 80% of trade moves through ports.

All networked. Most under-secured. Marine scientists have worked on it firsthand.

[Goodness @_99Good]

@web3righteous GM

[Goodness @_99Good]

@cyber_rekk Active

[Goodness @_99Good]

@HSN_N3twork 👏🏻🙌🏻

[Doran.artisan.cash @doranmaul]

@afterserotonin Turns out it’s 9 months of work, 5 minutes of lunch

[Andrei Verdes @theandreiverdes]

My coworker got promoted over me.

He was worse at coding. Better at politics.

I wrote better code. Fixed more bugs. Shipped faster.

He talked in meetings. Took credit. Played the game.

He got the promotion. I got "keep up the good work".

That's when I realized: corporate rewards politics, not performance.

Six months later I quit. Started freelancing.

Now I make 3x his salary. No politics. No credit-stealing. Just solving problems and getting paid directly.

The best developers rarely get promoted. They get used.

Companies optimize for compliance and communication. Not competence.

If you're technically great but politically terrible, you'll never win at corporations.

Leave. Build your own thing. Get paid for your actual value.

[fardeen @fardeentwt]

the art of disappearing and starting over is such an underrated skill.

[Goodness @_99Good]

@Varticoo @Tony4Real___ Ifb

[BUNDA HASHIRA🐆🪭 @cindythehashira]

Chop Ls silently
Chop Ws silently too

[NO CONTEXT HUMANS @HumansNoContext]

Task failed successfully

[jonzing. @ehisssss]

i’m living my broke life peacefully

[chidi michael @tschidiemichael]

I can't tell you what to do, but I can tell you what you're not going to do with me.

[𝔗𝔬𝔫𝔶4ℜ𝔢𝔞𝔩 @Tony4Real___]

That period in secondary school when you came too early and you connect with nature for a while before the loud people arrive>>>

[Ghost St Badmus @commando_skiipz]

Nine days ago, a major Kenyan health-tech startup was allegedly hacked, exposing the personal records of 4.8 million Kenyans.

The platform was designed as a “health wallet,” allowing users to save, send, and pay for medical treatments or insurance.

A hacker under the alias Kazu claimed responsibility for the attack, boasting about stealing 2.15 terabytes of data. He even leaked a 2GB sample online containing 114,000 real user records.

Dates of birth, full names, national ID numbers, phone numbers, and even medical diagnoses, treatment details, and billing information from hospitals across the country were exposed.

The ironic part is that just two months ago, the startup announced it had achieved ISO 27001:2022 certification, something considered the gold standard for information security management.

No one yet knows exactly how the attacker gained access. It could have been through a vulnerable API endpoint, leaked credentials, or misconfigured cloud storage.

I can only imagine what the company is currently facing or will face very soon. It’s likely one or more of the following:

1.Mass lawsuit
2.Severe reputational damage (loss of customer & investor trust) + mass customer panic and account deactivations
3.Fines & sanctions from regulatory bodies

A platform built to make healthcare more accessible has now put millions at risk of identity theft, financial fraud, and even blackmail. Imagine stumbling upon a colleague’s medical history & discovering they’ve been treated for a chronic infection or disease.

Security should be a shared responsibility across teams & must be considered from the planning phase of the SDLC.