Adam Caudill

Security Leader, Researcher, Developer, Writer, & Photographer

on Unfair Judgement

Recently I was leaving a store after doing some Christmas shopping, as I entered my car someone recognized me and waved – this is the story of what went through my mind in that moment, the mistakes it revealed, and the regret that went with it.

For those that are here in hopes of an article on information security or development, please pardon the interruption; this is about human nature. I know the value of your time so I try to diverge from my normal topics as little as possible, but this incident was striking enough that I thought it worthy of publication. In the days since this event, it’s bothered me deeply.

Christmas approaching, the sound of bells in the air, stores crowded and parking lots jammed – a typical late December scene. I walk to my car, large white bags in hand, more relieved to be away from the mob of people who now inhabit every retail outlet than excited for the festivities ahead. A few feet away from my car, I reach into my pocket and press the button to open the trunk; once the bags are secured, I press the button to unlock the door as I withdraw them from my pocket. Although I have nothing else pressing to do, I don’t waste a second of a step. I want out of the circus.

The door open, stepping in, I see a wave through the windshield. Standing next to the car across from mine, a man stands, a smile on his face – he’s clearly recognized me. I’ve seen his face, but I can’t place it. I’m sure I’ve met him, but I couldn’t say where or when. I smile and nod.

He hesitates for a moment before getting into his car, he’s waiting for something. He’s waiting for a further acknowledgement, he’s waiting to see if I’ll speak to him.

Who is this man? Where do I know him from?

I take a closer look at his face – I’m sure I’ve met him, but where? I look at his clothes, no hints there. I look at his car, and here I make the mistake. It’s older, red, a cheap asian import, a bit beat up, cracked windshield.

In that instant, I put him in a box – lower-income, non-technical, not in my immediate social circles. Maybe a barista at one of the coffee shops I frequent, or a member of my company’s helpdesk – there’s enough turnover that I don’t recognize many of them. Or maybe he’s that new cook at a restaurant I visit often.

I didn’t consider that he could have attended one of my talks, or that we went to the same user groups, or that we met at a conference, or any of a thousand other possible ways that I met him. Why? Because the box I put him in didn’t allow that.

I closed the door without further acknowledgement. I wanted to leave, I couldn’t remember where I knew him from, there was no point in staying.

He stepped into his car and left.

In the moments that followed I realized that I did, in fact, know who he was, and that I had judged him in an entirely unfair way. He’s a developer that I met at a conference earlier this year. He’s funny, insightful, extremely knowledgeable. I avoided a conversation with him because I put him in a box, I avoided a conversation with him because I judged him wrong, I avoided a conversation with him because of his car.

I had just criticized people for placing things into boxes, rigidly defined, potentially incorrect, likely oversimplified, boxes – and I found I did the same thing. How unfair. Had he been getting into a nicer car, I’ve no doubt that I would have known who he was.

Moments later, sitting in my freshly waxed BMW, lost in thought, guilt began to set in – not only did I judge him for the car he was driving, I presumed he would have similar priorities to mine, that he would make good money, that he had good opportunities, that he didn’t have more important ways to spend his money.

Maybe he donated his money, maybe he was stuck in a low paying job, maybe his family had medical issues, maybe he just wanted to keep his life as simple as possible. There are a thousand reasons that this person wouldn’t be driving the kind of car I expected, the kind of car that I expected a good developer to drive.

I still feel guilty – guilty that I misjudged him, guilty that I avoided a conversation because I didn’t know who he was, guilty that I put people into boxes based on something so silly as the car they drive.

My friend, I am deeply sorry.

Adam Caudill

Related Posts

  • Juniper, Backdoors, and Code Reviews

    Researchers are still working to understand the impact of the Juniper incident – the details of how the VPN traffic decryption backdoor are still not fully understood. That such devastating backdoors could make it in to such a security-critical product, and remain for years undetected has shocked many (and pushed many others deeper into their cynicism). There are though, some questions that are far more important in the long run:

  • On the need for an open Security Journal

    The information security industry, and more significantly, the hacking community are prolific producers of incredibly valuable research; yet much of it is lost to most of those that need to see it. Unlike academic research which is typically published in journals (with varying degrees of openness), most research conducted within the community is presented at a conference – and occasionally with an accompanying blog post. There is no journal, no central source that this knowledge goes to; if you aren’t at the right conference, or follow the right people on Twitter, there’s a great chance you’ll never know it happened.

  • A month with DuckDuckGo

    It wasn’t long after Google went live that they became my search engine of choice – with the only other (somewhat) viable option being Yahoo, it was an easy choice. In the years since then, I’ve not questioned that choice, but now that Google is focusing on killing features and building little-used social features, the time seemed right to see if there are better options. So a month ago I began an experiment, I committed to using DuckDuckGo for a month – here’s what I’ve found.

  • HP Folio 13

    When Intel and various industry partners started talking about “ultra-books” as competition against Apple and tablets, I was more than a little skeptical. Ultra-books are small and light weight – but not cheap (average price being around $1,000) and rather underpowered compared to what you can get for the same money with a more traditional laptop (they are basically MacBook Air knock-offs). I had written them off almost as soon as they were announced.

  • My 5 minutes of infamy

    October 28, 2004 is a day I’ll remember for the rest of my life. I was coding away on the next version of a small product called GSuite that I was building for a tiny (and now nonexistent) software company called Imspire Software. It was a simple tool that provided some goodies for Gmail users, and had a few thousand users (it eventually died as a result of rapid API changes and new tools directly from Google).