Several people I respect recently made similar observations to the effect that there is the security community, and then there's the security industry, which are frequently two VERY different things with somewhat misaligned goals and incentives. Seems like there's a lot of truth to explore there.

From my various provocations on LinkedIn the past six months, it's become clear the latter is largely content to sit quietly or even cheer as this administration makes a public mockery of everything their industry claims to stand for. I suspect this may have something to do with tons of security firms suddenly recasting themselves as AI-focused companies.

Am I way off base or too idealistic or simplistic here, or just jaded? I've been trying to identify the real source of my malaise over attending security industry events over the past few months, and I think this dynamic is a big part of it.