> there is neither a strong security mindset nor a realistic option to implement meaningful security in infrastructure that often as not is decades Honestly, t

> there is neither a strong security mindset nor a realistic option to implement meaningful security in infrastructure that often as not is decades Honestly, there is the opposite of a strong security mindset over here. Just a year ago, a security expert found an app of a major party leaking data of thousands of private persons - it was basically a web application without authorization. She tried to disclose this responsibly and naturally got sued due to unauthorized access to computer systems. Lilith Wittman is the person if you want to look further into it. That's the standard here for security topics. And if you keep digging into prosecution of cyber criminality, or at least actions of the state to increase cyber security, or at least actions to increase competency in cyber topics, it just gets worse. For example, they are looking for cyber security experts to join the police and state departments, but because they'd be working in various kinds of police jobs... they have to go through the same fitness and endurance tests as all police officers. Casual things like 12 minute runs, obstacle courses under pressure. Things IT-Nerds are good at. I might have been interested some time ago, but currently that's just a recipe for criminal charges and disappointment.