Starting a Side Hustle – Why is it a new must do thing

I have been watching many YouTube videos during the 2020 lock down. Learning how to pick stocks and buy the Dip, how to do Drop Shipping, how to do Print of Demand (POD), as well as how to start utilizing YouTube for a side hustle. While it is interesting to listen to many of these videos telling you how you can make tons of money by doing what they have done. Most of them want you to buy into some membership or program that gives you exclusive access to their content on how to do what they are pushing. I for one am not willing to pay for their expertise on how to do something as that would defeat the purpose I came to watch the videos. I want to learn how to do these things without paying for it, I am willing to put in the time and effort to learn what is needed and not pay some “Guru” on how to do it. First off if they were that successful in a specific area they would spend more time doing the one thing that is making them the most money, and since it takes a lot of time and effort to make videos, my guess is that is where they make the most money.

Andrei Jikh

While I do like most of the people I watch as far as content value goes. Some have a great video presence, like Andrei Jikh, who uses his cardistry and magic to add more to the videos besides just the information they are providing. I also watch Ask Sebby, Wallers Wallet, Brian Jung, JJ Buckner, Jake Broe and The Credit Shifu as I like their content of their videos and I do get great value from them. If I like you content I will give you the Thumbs Up and smash the like button.

There are many others who are decent with the content they provide but are always pushing the other paid features they offer, and never provide the full details to what they are discussing. That drives me crazy, they talk all around what they want you to know, and then try to get you to go to their paid course to get the full details. I for one am not wanting to pay for some extra course to further my possibility to become rich in one area. While I have told people in the past you have to spend money to make money, I do not see the need to pay for specific knowledge when I can learn that by other means. I would prefer to learn with out paying for the knowledge, especially when the information is freely available and I can learn it if I take the time and not just pay someone to give me the cliff notes version.

It seems that everyone is trying to get some kind of side hustle going on theses days, for one reason or another, they want the extra income. Mostly they see people telling them how great it is to have a side hustle and how much money they make from it. I have heard some people say that a side hustle is just a second job, and I started thinking, that is not completely the same things in my opinion. While it is a second job of sorts, it does not have the constraints that a normal second job would have. First you get to set the hours you will work and how long and often you want to work. I guess I would consider it more of a free lancer with no hard commitments.

Side Hustle Ideas:

  • Uber / Lyft driver
  • YouTube content creator
  • Print on Demand products
  • Drop Shipping products
  • Real estate investor
  • Take your hobby and make a business

Have multiple income streams is the new normal for many people, and the side hustle is the way to build that income streams.

Why a Side Hustle:

  • Salaries are not growing that much
  • Cost of living is going up faster than wages
  • Single point of failure in your income
  • Allow for more savings for retirement

Red Bubble

I am probably not going to start a YouTube channel, not something that really interests me and I would not want to keep up with it. I have started a Red Bubble shop, added a few things up there to see how that goes. Working on a few designs and trying to determine a niche that I want to focus on long term. I like traveling so that is my primary focus on the designs, but need to get a little more fine tuned to designs. I kind of like the shop aspect as I am actually learning to use tools I have wanted to learn for a while. Have been learning Inkscape and Gimp by watching videos from another Youtuber Logos by Nick. He has some cool designs and I have been working to incorporate them into my designs, and learning how to use the applications. Do I expect to make a ton of money from this, probably not, but if it takes off that would be nice. In the long run I have learned a few things and that might help me down the road in something.

If the thought of making some extra money then take the leap, I do not believe that it should cost you a bunch of money to start. Start small and work your way up from there, nothing in life is free, you have to work for it, put in the effort and don’t quite. In the long run you might be able to end up leaving your current full time job to make your side hustle into your full time business. As I have always said, if you enjoy your job you will never work again. If you hate your job, then your trading your time for a paycheck. I am in that current situation, I am trading time for a paycheck. I enjoy the work but it is not what I would do if I had a choice, it just allows me to pay the bills, pay for my kids college and save a bunch for my retirement.

Pandemic Updates – Staying at home for the greater Good!

So, we are still hanging out at home due to the COVID-19 Pandemic. Things have changed only a little for me during this time, I am still working jsut now at home more often. I was used to traveling to clients sites almost every other week, and now I am doing everything remotely for the most part.

Having meetings via Teams, Webex, and even Zoom has been interesting, especially with all the people who are not used to working remotely. With people demanding everyone use their webcams in meetings we get to see some interesting things, like people’s homes, their family members, and even their pets. This was not a normal thing that would happen several weeks ago on a virtual meeting. Several of the platforms are now allowing for virtual backgrounds, which gives people something to show other than their homes (messy or not).

https://i0.wp.com/thebasispoint.com/wp-content/uploads/2019/09/Conference_Call_Bullshit_Bingo_The_Basis_Point_via_INAGFATT.png?w=525&ssl=1

Been reading some articles from several people (not sure what makes them an expert on this subject) twitter and news articles who want to tell me how to work from home and how I should act in my virtual meetings. I think that giving people a list of things that work well for you in your remote job is stupid, as not everyone is the same or wants to do the same things as you. I have no problems with listing out things to try, and let the person decided what works best for them, but stop telling people how to work remotely. Also, telling people to not mute their microphones during meetings so they can have better interactions with their team is ridiculous as no one would ever get anything accomplished. All you would probably hear is people breathing, eating, typing and other background noises. Making the meeting useless and take for ever to get to what the meeting was intended to cover. People will figure out the flow, just let them work on it, as every meeting has a different focus and drive based on the purpose. Plus half of the people are chatting with each other in the background about most of the topics being discussed.

https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOIP.gwjDbIQG4YCrKF37YKlVcQHaE8%26pid%3DApi&f=1
That cozy work environment we all love

Not everyone is geared to do remote work, and many people like to have that little interaction with an actual person in their work day. Some may even take a little more time to find their groove in this process and it will be a trial for several weeks to get it to their grove. Some people need a routine to get through their day, while others will just wing it everyday. Which scenario works for you just keep dealing with it and keep at it. For the people who are like “see now they (their employer) have no reason to not let us work remote going forward”, you may have to keep dreaming, as it is not that easy for every company to make that an easy decision. Be happy you have an option to work remote, not everyone has that as an option.

We have the people who were terminated or furloughed as the business could not continue making payroll. Then there are the people who are currently identified as essential (Medical staff, grocery store staff and food service staff) and then there is everyone else either working remote or sitting idle collecting some paycheck (either a full or partial payment) waiting for things to start moving again.

What is normal?

Will everything go back to normal? Well you need to define what normal is to start that discussion. I do not believe everything will go back to the way it was before the pandemic, I do see some changes that will last for several years if not permanent. People may get to work remote for some time before getting asked to come back into the office. I do not see that everyone will be required to come back all at once, it will be the people who want to or are able to come into the office to work. Some may not want to come back at first but want the comfort of working at the office with their colleagues. Others will stay remote for as long as they are allowed to, some may be told to come back to the office, while others may be allowed to make that a choice to stay a remote worker. Some peoples positions will be eliminated as there will not be a need for them due to less work overall, less money coming in to support the staff, and possibly the business not getting back to pre-pandemic operations.

https://i0.wp.com/images.mentalfloss.com/sites/default/files/styles/mf_image_16x9/public/iStock-650322650.jpg?w=525&ssl=1
Wishing to be heading somewhere nice

Traveling will take a while to get back to any type of normalcy and some airlines may not continue with or may limit some flights to certain cities (less profitable locations). Business travel will change for many, as it will not be justified to fly out to do those meetings onsite. Sales people may not be able to get into meet the people they are trying to sell products to. For many if it can be done remote, then that would be the preferred option, instead of the expense of traveling and the possibility of someone getting sick.

Vacation travel may take a big hit, some will be due to fear of traveling again, and some will be due to financial limitations from layoffs and people having less money. People may just do more driving to nearby areas that are less crowded, and less people flying on crowded planes to large populated areas. Cruising may have some less crowded ships, but not sure if that will be just older people and some families with kids, or if it will be across the board for people. Have read that cruise lines have seen an uptick in people booking trips for 2021, but I think it is people playing the game, and are hoping for a cancellation to get an extra credit fees to book a future trip or are taking the current credits they got for canceled trips to hold their place on the next ship.

Who know what the future will bring, I guess we will find out in the next coming months. One thing I can say is I hope people stop being stupid about this whole situation. Yes it sucks, and maybe could have been handled a lot better by the people in government. But if we all work together we will get through this sooner than later.

New work uniforms if we are not careful

Starting off 2017 right! (I hope…..)

Well its 2017 already, and I am not sure where 2016 went.

Last year I was extremely busy, traveling about every week and multiple ROC’s due weekly for my previous company. Never had enough time to actually do my job well or even think about fixing the issues that we had. Now that I am at Coalfire, I have plenty of time to do my job, with tons of resources to help me out. I am not traveling as much, which I sort of miss, hope that changes a little starting soon. Working from home is a little weird, not sure it is something I really like, miss the interactions with other people. Not that I do not like my family, its just getting out of the house for a little while and talking to other people with similar interests. Will be trying to get former colleagues to do lunch once in a while to at least try to keep up with whats going on.

This year is starting off fairly decent for me, since I am getting to attend two different training classes. First one is an ISO 27001 Lead Auditor certification course. I will be heading to Colorado for a few days. The class was supposed to be for junior associates that needed a certification to allow them to get their QSA. I asked if their was space I would like to attend, and I guess there was room for me. The second class is PCI P2PE certification, which will be a little harder from my perspective. Most of my cryptography experience is military related and not really geared towards the commercial sector. If I pass this course, I have been asked if I wanted to take the PA-DSS course and then possibly the PA-P2PE course. Since they are in need of people to assist in that area, I said why not. I am always willing to take training classes, certifications never hurt anyone.

So it looks like my first full ROC I am lead on will be a client that they have had for a while. This should be fairly nice to get to learn their methodology, and show my manager, I am able to do the work. I was brought in as a consultant, and not a senior consultant. That was something I had decided to do, I originally had interviewed for a senior security consultant position, but since they were willing to pay me the same for either position, I took the lower level position. I am sure some are going WTF, I would never do that. Well, I am more than capable to be a senior consultant, but If I come in as a junior level person and can show that I am very good at my job, I will more than likely get a promotion or possibly opportunities to do other stuff. Which is sort of what is happening already with the certification courses.

Well 2017, lets hope things keep rolling along smoothly…..   

Starting a new Job

I have Left Sword & Shield to take a better opportunity with Coalfire Systems.
There were multiple reasons for leaving Sword & Shield, and most of them are related to one individual that has moved up the ranks in the company. He was originally hired to do report reviews five years back, and is now the Senior VP of services. Since his move into management there has been a drastic exodus of highly qualified personnel from the company. One major issue is that the CEO/President, Executive VP and COO do not even notice the main reason for the high personnel turnover.
Since I turned in my notice, the CEO and COO have completely ignored me. Walking down the hallway, I always say hello to everyone, and usually get a hello back from whomever is there. Not lately; had multiple encounters with the C suite and they literally walk past me as if I was not there.
I wish all my former colleagues well in there endeavors and hope things get better.

Splitting my time between 2 bosses

So my move over to the PCI-QSA world has been extremely slow, primarily due to upper management. I have been currently splitting my time between doing penetration testing and QSA work. It has not been an easy process working for two bosses who have different scheduling styles. One gives me my schedule months out, and the other will send me an email days before he expects me to start working on a project. This does not always work well since the one boss does not usually look at my calendar to see if I will be available. So I get scheduled to do a penetration test when I will be onsite at a customers doing PCI work. Usually never works out in my favor, and makes for working long hours, with no compensation for it.
My bosses boss (our COO) said that on Jan 1 2016 I will move over to the PCI group but will still need to assist the penetration testing group with some projects. Not sure that is actually going to happen. The one thing that makes this a pain is they already hired a person to fill me on the team, but another person left in November leaving another shortage. The interesting thing is this same issue I am having with moving groups is the same reason I left the company the first time I worked there.
Only time will tell if I actually get to do my new job or if I am stuck being split between bosses.

PCI-QSA Training

Spent the past 2 days in Boston in the PCI-QSA training class. Taking the exam the last hour and a half of the class, but will not know the results until a week or two later. The Class was interesting, and I learned a little bit of information from the instructor on his perspective of doing assessments. I meat several interesting people, from all over the world, and working for different companies. I though it very interesting talking to the people working for the accounting firms, and how they were using the QSA certification with their clients. Most of them were doing just gap analysis and not actually signing ROCs for clients.
Well hope to hear if I passed….  

Passed the GWAPT cert

I took the SANS GIAC Web Application Penetration Tester (GWAPT) class back in December of 2014 in Washington DC with Eric Conrad. Have been procrastinating for several months before I had to finally break down and take the certification before my time expired in late April 2015.
Spent a few days going over the books to refresh me on the content that we went over, and took one of the practice exams and actually did not do too well on it. Never taking a SANS cert before I was not sure what to expect, and probably should have actually allowed for the 2 hours to sit the practice test. Rushed though it and guessed a lot of the questions, and did not remember going of half of the info. (Note to self actually read the questions and each answer and not just say that looks good.) Overall I was a little frustrated after the first  practice exam, since I have been doing this for about 3 years now, and many of the questions seemed to be based on opinion, and not actual facts. Several of the questions had more to do with general penetration testing then actually web application testing, like needing to know the TTL from a DNS request for a domain name.
So read the books a few more days before taking the second practice test, which I did much better on, since I had some idea on what to expect on the test.Did rush though it again actually did the entire test in 48 minutes. Which is really not that great, but I just wanted to make sure I had some idea what they real test would be like. Two days later I sat for the actual GWAPT test, and planned to take my time and read every question throughly.
Sat for the exam on April 9, 2015. Finished the test and passed it fairly easily, but was some what perplexed that it had nothing similar to the practice tests. It seemed the the practice exams had nothing to do with the the actual exam. Many of the questions were topics that were in the books, but never brought up in the practice tests. Which frustrated me a little, since I had to spend a little more time looking for some of the answers, that I had not really gone over previously.
So anyone planning on sitting the exam, and that has not taken a SANS cert before, plan accordingly to make sure you know all of the content in the books. Do not expect that the practice exams will actually prepare you for the real test, it might actually make you study information that is never asked on the exam.