 Well, thank you guys for doing this. I know it's probably getting late over on the other end of the world So thank you. Thank you. Thank you for I don't know wanting to hang out even if it's kind of late in the evening And I know it's gonna just gonna get later Yeah, thanks for having us. Yeah It's okay. I think it helps that we're in lockdown. So we have some interaction. Yeah Well, I would like to make this as cool and casual and informal as we can be I like I hate the word interview right because I don't think that's right I just think it's hey us just hanging out and chatting having a conversation Is that cool with you? Yeah, yeah, the stuff that I Sounds pretty wild to me the stuff that I put together isn't by any means meant to be like a strict script Or we don't have to stick to that like you guys can answer any part or talk to any part at anything And we'll just kind of roll with it. It's a flow whatever and obviously if there's anything that you would like Don't want heard or said or you accidentally released some deep dark spoiler We can obviously like edit out as long as you're still cool with this going online Yeah, so bad you got the NAB us password ready Should we just kind of like roll into it get right started and can I badger you with questions or? Yeah, yeah, sweet Okay, so just to kind of like set the stage Give it like the hill foundational baseline for the whole conversation. We're talking a lot about try hack me your baby Can you give me a little bit of a background on what try hack me is? How do you define it as the creators host maintainers developers, etc? So whenever whenever we're explaining try hack me to people We're always the way we describe it is that it's a learning platform that makes it easier to break into security So our idea for try hack me has always been that We want people to come to try hack me whenever they think of learning security. So track me should be the first port of call Yeah, just like I think one a shoe and I met like a few years ago And it's the cut sort of the common thing of you know a problem that we actually wanted to solve We were thrown into a learning environment, which just wasn't really helpful was really buggy didn't really work Didn't really teach us anything And so if we wanted to find a fix for that solution and that was you know having a yeah and all in one Sort of virtualized lab for learning and breaking into security. Yeah So that was kind of like the idea or inspiration behind it Like you just wanted they there wasn't something exactly like what you wanted already out there Yeah, so Bennett like Ben Ben mentioned Met we met your attention and obviously part of the internship was doing some security training on stuff like web apps networks And we like we found it quite hard to learn because it was at that point. It was just here's an IP address Here's an application, right and like it's quite fun doing challenges sometimes But and you like like going down the rabbit holes like really good fun But like when you're learning it's a very inefficient process You'll have like a million tabs of Google open You'll have like a million 10 or windows open running a million different tools and that that's not very That's not very efficient learning process. So this this all started out as a side project More for us to you know, easily to easily learn and then and then ever since and I think that was around Around August September and then the first or at least the first public version released in November December, right then Yeah, yeah, we had a felt like a prototype within sort of three four months. We pushed out and Yeah, it was like this really really weak sort of basic application where you could deploy one machine It was like and I think there was even rooms there We had like a credit-based system and that's when we met dark. Actually, I think you you came in duck We you shot us a message and said hey, this is really cool what you're doing And I think it was just after the credit-based system, right? Mm-hmm I I joined and I could still still see the messages and chat in the juice shop room Well, we had chat still of the credit-based system That's how I knew about it because otherwise I had no idea that we used to have that. Yeah Yeah, the iteration. It's gone through. It's crazy. Yeah I think that's like a great thing as well for which I hack me We're not afraid to constantly change things like make different iterations You know and push out to the community and getting feedback from it. Mm-hmm Did you guys get Did you guys get the feedback in response that you were hoping for or was it a surprise? So I think it was all it was all honestly quite surprising because we never we never intended for To have me to be used by a lot of people It was always just for me and then to like get machines on their hack easily here So when we saw people starting to use it, we're like, oh, wow, this is really cool people Actually when you use try hack me So so it was quite exciting, you know to have built something and to have like people actually using it Yeah, definitely I guess I know Assemblance of that feeling kind of like when you create something and then you see real people using it It's like well, that's a that's a pretty cool the feeling feeling Yeah, you find lots of bugs like that you never thought would even be possible Yeah Yeah calling your website try hack me doesn't help at all Yeah, yeah, actually the community part of it wasn't like it wasn't actually ever sort of never thought about doing a Like having a community aspect to it. It was only until we met dark star John You know, you were like, right, I think this is great Let me take, you know control of the community aspect of it and build that up And I think that's what really sort of gave us the initial You've seen that's when the trouble started. Yeah Exactly Yeah, there was yeah, I think the community's been key in all of this and it was all up to dark or from dark that we Yeah started it really. Oh So the whole user submissions and like community involvement I guess submitting things and adding to the whole environments and all of the rooms that try hack me has that was kind of your Hard charge dark. Is that right? To some extent when I joined and I I put it up on Twitter a while ago like the initial messages I had with Ben that I thought With doing the submission process. I had thought it had been a very community driven thing I guess looking back on it now I and maybe a shoe or Ben can speak to this that it I guess it was originally more driven by just adding these boxes up There and having it up there so that you could teach others with that I thought it was just a hey, you want to throw something up here You go for it and I just kind of went wow and I started throwing a bunch of things up on just Go ahead Well, yeah, yeah So like like dark said like like the feature of like having people upload their own boxes was something that's quite intended But I think dark drove a lot of the a lot of the engagement behind the future and a lot of the processes So stuff like how do we actually get people to upload? How like how do we how do we encourage them? How do we get people to push up specific content? I think the whole process and getting the community to engage with uploading their boxes was all his like his baby through a large part and I guess a lot of that on my end was just working with people and You know having friendly competition with people in the community to create better content that Initially, so I started out just a normal user and I was just uploading content of the site And I wanted to be the number one on the scoreboard and for a little while I was and I still claim that that's my throne as it should be But we had one of the users come along paradox that he's one of our moderators now that I was making content and he would push me to be better on it that he would come in and say Can you clarify on this or he'll come through and start challenging me for getting first place and things like that And he did dock me off the throne but we won't talk about that Nice Yeah, it ended up being a lot of just continual improvement on that end as far as the community goes and Taking what I had learned previously. I before I had gotten involved with try hack me I had done streaming independently Ended up dropping it because I just didn't enjoy it in the long term For what I have been doing it with and taking like the base rule set that I made with that Kind of form the base of like the rules for the community and just built from there So dark you were kind of hey the community guy is a community manager. Is that the right I guess role or title or whatever I have a weird title. I I think I'm technically content director right now and kind of community head. Yeah My yeah, yeah, let's go with that. I don't know. Do you guys want to clarify? It's kind of nebulous most of the time Yeah, yeah, I know I think I think that's perfect You I guess you also tend to wear a lot of hats So it's I think community depth of the I think content also very strong and then yes Yeah, you help us a lot here in there. So It's like a very overarching role. Yeah, most of the time the contents I guess it's split play you're pretty evenly between us I'd say as you you do a lot of the content as well, especially with our creators program Directing people and helping us keep the vision there of you know Maybe we don't have content on a specific topic How can we push that forward and push for change in that positive growth? I think that works out really nicely because it really is shared between all of us So a shoe and then what do you guys kind of consider your role or what do you actively work on? What are you working on now, etc? So I think Ben does a lot of the dev work and I and I do a lot of the I guess the business side of things But it's quite cool because because of this complimentary set of skills. We tend to do a little bit of everything So so I'll picked up like an insane amount of like dev skills from Ben He's like he's like God it through a lot of it and She all the business side of things and sort of yeah dark sand the vision has come from a shoe Absolutely, so it's quite cool that like we get to work on a lot together Which is like which is like the fun part of like try hack me is that we get to learn about so many things that are outside are outside our like skills of interest or talent And I as to what we're currently working on I guess they have been jumping here in case I miss anything, but one of like I guess the major thing is always is Scalability, so I'm sure you've noticed like or you've even seen that like through discord We get a lot of comments and a lot of feedback from people So we just want to make sure that their experience like with stuff like performance is Best so we I think the past few weeks is the very Fixing performance and scalability issues right then. Yeah. Yeah, it's something that I'd not had Thought I could have come around so quickly it was one of your videos John that thought of when you had a lot of popularity And we just saw things break and we're like wait what? Yeah, yeah, yeah sort of the you know What was it the basic pen testing video that just blew up and it I still think that things blowing up Yeah, that's like 330,000 views. It's just skyrocketed into the number one video Yes, that was a huge driving force so, you know, thanks for that was Great video. But yeah, as you said scalability sort of, you know, better in the user experience Like number one is like the great thing was our community like speaking to them and seeing what you know Can be improved and made better on the platform and I think that's primarily the focus right now cool cool when you guys were I guess getting started what sort of Rooms or activities or what things that you try to put in place to like really make them I know the baseline of the platform to encourage other people or just like here. This is our first impression for the world What did you put in there and why? So I think if if not One of the first rooms, I think one of like the earliest in rooms or the OAS to shop Because because we know that like at that time we were like interns and learning about security stuff And that's like and and to shop is like the holy grail of web security So we were like oh One if you had to set this up on your machine It's like it's just time-consuming and two is that people whenever people are doing to shop There's no like guidance. So we want to show people that look you can actually Come access a machine with a click of the button and actually learn how to do it so I think you shop was one of like the first ones and then I I can't I can't seem to remember Basic pen testing that it was blue and that was the very first room dark did basic pen testing in the OAS to shop I remember the OAS to shop the guy who made the VM The OAS to shop came on and gave us feedback. Yeah, I just remember him saying like how cool it was That's awesome I Just shovel where that I put out that so originally I started with blue and then I started making the Red primer series and the the primer series on the whole that I had the idea that you know what? What is gonna be a good core and it's gonna be you know covering the basics is Everyone has to learn the basics. Everyone has to learn how to use something like metasploit or end map You know, where do you what do you use if you don't have end map gonna be up a creek for a little while, but When did you guys start to see the platform kind of like us take off or like when did a ton of users? Okay, start to work through rooms start to create rooms. When did it just skyrocket for you guys? Do you feel like it has at this point? Yeah, so I think I think the past that well the early the latest growth spurt has been was December 2019 So that was when we first challenges the advent of cyber challenges So that was that was 30 days of very intense box making and we had and like yeah, since then it's been it's been really really crazy I remember the day we released the first Christmas challenge and we already had like two thousand people on the page at like 8 p.m. Oh wow Yeah, and we were deploying a challenge and Ben and I were like live and we're like, oh my god This is so stressful and we're on fire. I think ever since then yeah ever since then it's been it's been going quite well cool 2019 December 2019 right so like just about the start of this year almost right Yeah, yeah, and I think before that we were we were focusing a lot on students So we ran we ran a university CTF challenge just more specifically in the UK So we had that in I think in I think twice across that year once in October and once in March And that and that did like quite well right then I think you can yeah more to that No, no those went really well They haven't I think the October hack back to our university event had 27 unis And everyone competing to get to the top that was that was really good. Yeah, great fun. That's awesome Can you tell me a little bit or I mean whatever you're totally comfortable and cool with sharing I don't want you to give away like any like trade secrets or stuff behind the curtain But what what can you share? I guess a little bit about the infrastructure What kind of the tech is behind it to make the whole platform work between spawning virtual machines in the cloud But behind bringing machine up and down kind of a whim what what tech is behind that if I may if I may so a lot of the Infrastructure is hosted using it's all using cloud infrastructure I think that's been a huge advantage not having to maintain and sort of manage our own servers That's been I think one of the like a key thing You know to the success of all what it is at the moment a small success is I'll try hack me at the moment You being able to you know have these base images that you can just sort of spin up and terminate instantly It's been it's been great that there's so many sort of cogs to make this whole thing work But a lot of it has been configured in the cloud As for our application it uses a variety of different uses the mean stack without the angular and Yeah Sweet is that kind of the You said mean stack is that right with you said without angular? So is it a lot of JavaScript or what kind of languages do you typically work in for when you're building for when you're creating? Yeah, good question. So it's primarily no JS and Mongo and express and there's we have other sort of sort of scripts involved Yeah, as a small piece in the whole puzzle to make the platform function But the majority of our applications been programmed in no JS. That's cool But is that kind of your your weapon of choice? Is that like your strongest sword because I am so bad with JavaScript and no That's sort of it was like I'm still at university and it was like one of the units covered a couple of years ago And I remember making like the proof of concept was I was like, okay I had experience with it like a couple months back and sort of went from there and it works So we were like cool when node.js is up and coming and sort of becoming more and more popular And so we just kind of ran with it Sweet yeah, that's probably a really good one to choose considering I mean like you said It's just becoming like the number one thing. Yeah, like the industry standard Yeah, yeah, super popular and the amount of libraries in the community and sort of the feedback around no JS is it's great as well because now having a stack overflow page that you've got a horrible problem. It's really helpful nice nice How much of the how much of the build out is automated? I mean between like you said between working in the cloud And I'm sure you've got obviously your node.js and stuff in there How is it deployment completely automated or are you still clicking around in whatever GUI for? AWS or is your digital whatever whatever it's in Yeah, yeah, so are all our all our deployments the cloud are very API driven nice So they're yeah, so which makes them like almost fully automated apart from the Debugging here and there which makes it which makes it quite easy to build into a web application Part of me is thinking about how that API stuff goes Because I when I think of okay spinning up some my cloud infrastructure I'm using cheesy things like terraform or decorating things with Ansible and vagrant or What what does that look like on your side or is that just hey strictly restful API calls? Yeah, yes as restful API calls So when we initially started we initially saw when we actually heard about using terraform But I'm terraform was mostly just for orchestration of infrastructure as I think you use you So it didn't really fit our use case and because a lot of our vulnerable machines tend to be base images, right? The only process for deployment is that it's just using a base image Which is why you don't need to like labels on these images or you don't need to have these orchestration tools on there. I Guess that's a good point, right? Hmm. I think that we've been experimenting with Sort of more like the minimal viable product we've got and sort of you know seen that it's really great But like things like having networks which are coming up very shortly Sort of deployed and configured in the cloud. It's a little bit more complicated So as we see, you know, sort of the future of try hack me that the extra functionality applied there It's going to be a little bit more complicated than just you know one API call to know it's like deploy a machine That's really cool. I'm sure a ton of people are super excited for the for the networking capability How would that kind of look if I may ask right even on even on the front end? Would would you okay let kind of the player a designer like draw a little network map and put machines here and there? Or how do you envision that all coming together if again, not I don't want any trade secrets, but whatever you're cool No, no, that is good. The fantastic thing is just give you a bit background like that My my dissertation I worked on the network So I had a lot of time to be able to research and I could fit uni and try hack me in together That's awesome So we've always built up like try hack me to be as flexible as possible So a shoe mentioned that it's API driven not just the calls to our cloud infrastructure, but the platform itself You know in the whole room sort of model that we've got being able to clone repurpose and you know Enter in different rooms again flexibility and I wanted to apply the same stuff to network So that networks can be used within cough that can be used as I like a more CTF based Idea that could be implemented as its own course. So how it's designed at the moment is you can physically Have your network you can upload it using the same sort of Principles that is done now you can give it some extra Details and exactly like you said it just sort of creates the network for you And you can deploy once it's uploaded and you've added in the extra extra details You'll be able to just deploy your own network and tear it down and bring it back up relatively You know simply simply so so yeah, it's yeah, it's good. I'm excited for it I've spent a while making it all sort of functional and yeah, I think it's gonna be great I think it's gonna add a lot more Teaching a lot more for security concepts through networks gonna be great That sounds super cool And I mean I love the faith I love hearing that you're excited about it like hey That's gonna be a really great win for the community and all the people that want to create and build and play you in that And I know the same I may remember you telling me about how excited you were about the king of the hill Functionality and that has been incredible, right? Well, how was king of the hill? What building that making that the reception? What what can you what can you help me understand in that whole new release on the king of the hill game type? So I think I think it initially sorted out as so Ben and I are just constantly throwing ideas at each other And one of these ideas was um, it's just like messages at like any time of the day Which is quite cool because we just we tend to get like very overexcited Just was I just message Ben and I was like oh We don't actually have any anything like collaborative on the platform because it tends to be someone just enters a room And then and then Ben comes back saying that oh like I would make it even more fun Is if people collaborate, but there but it has a competitive element to it and and then that sort of Broad about this whole idea of how do you actually develop something that's fun to play? You know you get to work with other people but at the same time that the element of competition involved and then I think I Think Ben Ben mentioned earlier that or when we were talking that someone in the community was just talking about how like these competitions are done Right then I think mm-hmm. Yep. I'm gonna say on that probably Yeah, yeah, so I had the initial idea for like a competitive hacking game And yeah, we spoke about it in the community and that again keep out of speaking to people and never been there in the chat Is that someone else said coming but it was it's awful I think it was definitely one of the key members of it in the community said like hey, we do this at school You know we've done this at college and this is how it's worked And that was me that sent you the documentation because I do red team competing against Blood teams that are given a bunch of boxes to defend and it's eight hours of them getting mentally abused by us I Yes, so yeah That's sort of the initial idea of like speaking to people get getting that idea And and then we just kind of ran with it and we did a trial when it went down really well and off the sort of doing the tweaks Releasing it was it's fantastic. We have a lot more ideas because it's just finding the time to implement it How do you guys plan out? I guess I guess that the box or the whole vulnerable room that they kind of move in between Keeping it okay an easy difficulty so that anyone can work with it Or a harder more difficult box what what sort of mental mind mapping does that take I can probably speak to this one For King of the Hill, it's a little bit different General box Mentality I actually just gave a talk about this at Sarkon nice where you have an idea of you can you have a kill chain that It's the same as like a kill chain on an assessment that you can work backwards from it And you almost make yourself a map of how you want to have things planned out where you look at major points where you have your entry point you have your privilege escalation what enumeration you want your users to be able to do and Depending on the level of extra just things you throw in there like extra ports that are open extra programs that are installed And running on the computer, you know that it escalates your difficulty and you can tweak it from there I King of the Hill I know Ben and issue can probably speak to this quite a bit But you take that and you essentially spread it out laterally So you have four or five different kill chains per box that each users a little bit different that you have to get up to that room level One of the main ideas was that we wanted this defending element for King of the Hill Right, it or like it wasn't just hacking into a box That's how do you stop other people hacking and and and part of that part of that defending aspect was we need to have multiple ways In because if you just have like an SSH connection or an RDP connection Someone could change a password to that service or turn that service off right which wouldn't make it fun So so the idea was that if they're like multiple services or multiple programs opening when someone becomes king or when someone roots the box They'll be like oh my god I have I have like five six different things I need to turn off while other people are hacking into those five six different things So that part is what we thought would be quite fun for people taking part in King of the Hill Yeah, we issue and I when I we did we met at an internship in London and there was a day We both pwned one of the boxes on another platform and we're both kicking each other off trying to defend it So it goes back as early as that. I was like, why did my connection die lug back on us like a shoe That's awesome has the gameplay kind of been what you expected it to be between okay It's both the red team adversarial stuff that people are doing to break in But even the blue team stuff because I always feel like when I'm playing King of the Hill like man I I stink at getting the defensive stuff put in place, but it's not like anyone can bring Oh, here's an here's an elk stack. Here's my bro logs It's it's different and then it's a okay quick one-hour game And you've got a little poor man's environment to try and patch and keep secure Yeah, so I think Like so far in track me. We actually don't have a lot of blue team content Yeah, I think a majority of the blue team content other is Jones But so so we've we we've actually explored the idea of having like you know having like a sack running or having steam solutions running where people could Look at logs that that would be quite cool But so that that's something there's definitely like room for in the future, but in terms of the gameplay I think it's been fantastic. We like We we release co-op and like Ben said we love to experiment things trial things just push things out all the time And the reception has been like quite fantastic There's tons of games running every day and we've been getting a lot of feedback that have been enjoying cough What was the game? I'm sorry has almost been like a The meta has almost evolved like an arms race for the red team side of things where you see people starting off with you know Of course people wanted to use things like auto phone scripts because there was a small pool of boxes initially That's not something that we allow at this point But you know watching this arms race evolve that we can go through and react to it and say that Okay, maybe we don't want to allow some of these things But it forces people to get better and faster at They're I guess hacking in that aspect and we can go through and actually develop the blue side or blue team Set of things from that where we can see you know What are we missing with content that we need to add at the site or specifically? You know what needs to be there in the box for the blue team to effectively be able to defend themselves Blue team is really hard man. It's really hard to get blue team stuff in It is harder than red in real life We've seen that over and over again that I mean historically blue team gets its butt kicked by red most of the time Which is I mean it's something that industry on the whole has been facing adjusting to having blue team be a little bit More balanced against red team You can't just use the chatter binary to lock one of your password files Especially if you like you you put a little time bomb in the chatter binary that blows up your shell like some of the box Yeah, people have been really creative with how they've made their cough boxes or even like you know The players have been able to upload their own binaries and have their own tricks. It's really great to see. That's cool What was the what was the driving force and kind of making coughs free to play because I remember hey at the beginning This is just hey subscribers only let's kind of test the water here Well, did you always want it to be free or was that I like hey, this is a huge success Let's give this to the world. What were your thoughts with hold that that's all strategy I think I guess then like jump in here in case I just don't remember correctly But like whenever we went when we did release call We I think we were thinking about monetizing it But then because we tend to run things as experiments. We were like, oh, you know, well, we'll run it for free So we had this one week experiment where we were like, okay Let's leave call open for free and let's see how it goes and we got like a crazy amount of optic in terms of the Active users playing call that week. So we were like, oh look people are enjoying it, right? So like why should we lock it down or why should we lock down the base model where people can go back against their friends That's really cool the the conversation of Monetization and funding is always like a hard one to have but it's really interesting from a the creative standpoint of like what what should we Gatekeep is not the right word, but I guess that's what I come to think Because like oh look, we're all want to do this right we all want to train We all want to like teach people we all want to learn and exercise and sharpen our cyber security skills So it's it's weird when you want to make that a endeavor and money For yourself, but I think you guys have just hit the hell hit the nail on the head like to try hack me It's really simple and what it asks for and what it doesn't Yeah, it's like Monetization has always been like like like you said a very very tough conversation But but like it's quite cool that having like the two or three of us like on try Hack me means that we get to make like our own decisions, right? Or we get we get to like sort of do whatever we want and the fact that you know We can make like certain rooms free for a week or we can make all three but like that freedom is quite cool quite exciting So I never asked and I wanted to I've been myself up because I forgot to but this is this is it right? You like you guys are the team. Is there anyone else that is helping out or do you is it? What is it? I Mean first of all we've had like massive help for community so everyone like if you're a community mentor Yeah, you if you're a room creator a room tester like the community's been like again key In moving track me forward, but yeah at the moment. It's just us. I'm hoping to bring somebody else on We're just gonna write up a job advertisement to help out with the development and sort of grow from there. I Mean wow, right? That's pretty awesome and kind of incredible and I'm sure it's got to be a good feeling to be at the spot Where you can put out some I guess some job advertisement because that's got to feel really real Yeah, yeah, it does and it comes back to the you know the awkward conversation of monetization You know having a freemium model it allows people to come and learn for free There's so much free content on the platform as well as description only so making I think yeah making use of that Great Cool With that with the community tie-in that you mentioned right so I know you guys have the discord server And I kind of want to zoom in on that a little bit I know that hey That's for the community that cultivates the whole environment and I do you use that to get some feedback How do you enjoy that platform? Is that the right platform for you? Does does that do everything that you need to or what other forms of feedback do you get and how etc? Um So yeah, I think Like so so John drool was like I think the biggest driving force behind the discord I think Ben and I was always it was always Like our thought process was always like oh we want to talk to users like that's how we want to build out trihack mean I think before that it was it was the very standard methods of surveys emails phone calls where we could that It's actually how like we got dark involved We were like we saw him as like sort of an active user and we're like aren't you mind hopping on for a call for like 20 minutes And you know now we're here So I think discord has been insane in terms of like how we communicate with our users because it's not just Getting opinions on on features and boxes really but we also have people filing bug reports Filing feedback through discord, which is I think really really cool Sweet Yeah, I mean I have my cheesy discord server and I just love it What Can I ask I mean looking forward what other things do you plan on bringing in to try hack me? So I know you mentioned okay. We've got the networking capability coming soon I know you want to pour more into cough There's one thing that I saw and it was a community question as well when I was kind of poking around asking people What is that university coming soon tab? That's been for a while. Yeah Create there's so many things have happened. That was put on hold. It's we want to have You know be able to have universities Sign up and sort of have like a separate leaderboard so that students can compete against each other We work with one university in the UK and it was requested that we had a like a University only leaderboard so they could you know sort of hack against their friends and see who's the best and I think like this whole gamification and activity type, you know Sort of model works really well. So having a sort of all your friends at uni sort of to compete against. I think it's gonna help Yeah, help them sort of you know move forward in terms of their learning That's really cool. I certainly would have loved that when I was at university It would have had a lot more fun I Know as the oh, sorry No, no, sorry, and now I'm just gonna say what I guess one of the other things we're trying to work on is We're just trying to like improve user experience heavily because we know that you know Like one part of learning is having content available and having this whole platform and infrastructure available But we're trying to see we're trying to build most instances into try hacking I would sort of make it easier for people to learn Because I think and I think this this might purely be like a user experience thing But like we we want to look at more ways that try hacking can actually aid in learning And that's that's been quite a quite difficult Conversation or just difficult set of questions about to ask ourselves because it's so broad But something I guess that could have a very big impact One thing I know I'm looking forward to And this is new for me because Obviously, we I was really happy and had a lot of fun putting out P kill my my new room that I sent over to you guys But I felt so bad just nagging you Ben Like over and over again. I'm so sorry. I need to push a patch. I Rather repatch You know done the intended way so never worries I think as you said that things like that like extra features to be able to just you know Update your machine that's you know, you've deployed and sort of replace your image with it I think it's gonna be great and really helpful. Oh, yeah, absolutely I think from from the creator perspective because I just feel bad pinning you No, not at all. No, no, it's it's something that's Requested heavily and people I think it's really interesting to see the unintended ways, you know to talk when you're pulling the machine It's yeah, I think it's I think it's really cool So being able to patch it straight away. Thanks for getting on that. You seem to be hot on Oh, it's funny. Oh Lost him for a moment. Come back This is awesome guys very long. No, I'm sure I'll catch it real soon Thank you guys again and again for doing this. This is this is super cool having us. Yeah, thanks for having us I Guess as far as other content goes I know it's been brought up a couple times in a shoot you mentioned this but expanding blue team content It's another big thing that we're looking at expanding that defender aspect just because it's it's something that it's very There's a lot of widely taught, you know, this is how you can break into things There's a lot of you know a fair number of platforms that are teaching that right now But having that increased coverage on blue team I'm looking forward to that Ben's back. Hey, sorry about that. What did I miss? Dark was just filling in for he's like, oh, I guess I get it. I better take the mic Yeah, I'm quite excited for the for all the blue team stuff because it's basically us She's going to be like dark. Can you please like look through all this or dark? Can you can you just like look through this million page doc and like what blue team stuff we can get out there? But yeah, it's gonna be a really weird conversation of yeah So I can I stand up a full sim environment on like these boxes and I just need you to give it like I don't know. How's it? Numbers only gonna go up. Yeah, sweet All right, cool. I know what we're kind of get. Oh, sorry Oh, no, it's in terms of other things that we're looking into think Yeah, I don't know if it was said or not, but the more learning pathways for sure and continuing the sort of pushing out more More content. So I feel bad because I feel like I've neglected like personally I haven't looked too much into the whole learning path Feature and functionality has that had a lot of success. Do you feel like that is good at where it's at? Does that get the reception you want? Mm-hmm. Yeah, so so so we've seen that a lot of people on try hat me like using the learning path. So a lot of the Yeah, so I'm trying to think what the breakdown is But I think all of them are are very are very well received because the main point of going to learning path is because The rooms are so modular It's so easy to slot them in different ways and a learning path for structure of going into a particular room And I think I think people like that structure, especially when they're learning content But that they've probably not seen before so learning paths have been quite popular. I Love that dichotomy just between a walk-through room and a challenge room because the challenge room obviously is like hey We're not gonna hold your hand. We're not gonna give you any guidance Just here's an IP address go and some people are used to that and really really like that But I mean as you said for the beginners the newcomers the people that are just like hey I'm getting my feet wet and I don't know what to do That's why I always kind of tout try hack me is like they'll literally hold your hand and walk you through it And they they're upfront with the write-ups Yeah, yeah, yeah, the idea has always been to sort of to make the learning more efficient and and Yeah, so some people do like the IP address structure But we've seen that you know putting the content out there and that being handled is quite like it's like Efficient for learning and then what what we tend to see is people people who go through a bunch of walk-throughs Then move on to challenges once their skill levels have been raised So the whole walk through this is challenging fits in quite well and having that flexibility on the rooms on try hack me He's worked has worked quite well Super cool I'm sure the learning path is just like mag like multiply that because now you've got hey Here's a collection of those guided rooms to learn and you don't accidentally hop into a little challenge Cool. We're almost at like a little 45 minute mark I don't want to be holding too much of your guys time Is there anything else that like we haven't discussed or we haven't brought up that you really want to bring some spotlight to Or you want to chat about? If not, that's totally cool I guess I guess just just just one thing to mention is that it's probably off late But for going back to when we picked up from act from like really massive growth is that we've had a really good team of content creators come on and so Yeah, John Ben and I just want to look at the submissions So just want to give want to give them like a massive shout out so people from the community and other people developing content Because I think it's quite cool that or at least the way we do content creation is quite interesting because it's not just Box submissions and rejections It's sort of people submit boxes and then it's probably a lot of it is dark guiding them throughout to build better box Is how to also part of that is how to write better technical content And then the end result is having really good content from out which our users appreciate So I think massive massive shout out to people that have been pushing out content off late Yeah, I have a firm belief that any submission and this goes for anyone that wants to submit content on that It's okay to fail any submission you have a goal there And we can get it up to that the standard that we look for and you can learn from that You know, I've mentioned this. I think the other day that you know submitting a box Making something like that it is, you know, it's a resume out of it It's something that helps build you up because you're learning a lot And even then as you were seeing John that finding those unintentional paths You learn a lot from just having something you've made get beat on Absolutely I have to reiterate what a shoe was saying massive shout out to everyone in the community that does content Devon our community staff members as well I love I love the way just you guys handle it because I mean it's super surreal seeing and talking with the three of you Because we know like hey, man, that's that's the core. That's where it's at But all of you have just been super supportive and always approachable It sounds like that's what I've always heard when chatting with the community like We love hanging out with the trihack me guys because they're nice and friendly and they talk to us I don't know. I'd like to think we all bite just a little bit. Oh, yeah That's true in coffee at least we'll bite it when we're playing the game Sweet So my last question that I like to end on for some kind of stuff like this is um Obviously we all want to do this sort of thing, right? We love cyber secures our passion We love teaching we love learning. We love sharing the knowledge. So if someone Wanted to put together their Like their their dog and pony show their trihack me their form of teaching people and helping the community grow What is your best advice to that person? What do they need to know what languages what program what techs hard skills and soft skills What do you tell someone that wants to do something awesome like this? I think Try to figure out how you learn how well how you feel that you learned information security How did you what is effective for you and work off of there and ben an issue can expand on that Yeah, I think I think more on to on to building building like a product or platform, right like trihack me I think something that's worked really really Well for me and ben is like being like these are driven. So I it sounds super cliche, but I think A while back we started feeding in like data points into term in terms of like how users use the platform What do they engage with best and having something to refer back to like having a tangible thing to see Is really really useful because that like sort of helps you guide like your vision for the product, right? Like you can see all users going to this room or users using this feature How many users like it and like and you can use that to basically improve your product And that's something we we've learned off of like I guess the past year Yeah, user engagement. I think for me, I think it's huge. I think you know the way you deliver content the way that you know If it's a video that how you speak if it's the type of hands-on material that you're providing user engagement I think I think it's really key and like if you want to like build something like try hack me or your own version I think having you know, it doesn't have to be really fleshed out You can sort of learn, you know, node.js or you know, python You know different frameworks in order to like make and push something out As long as you know, even if it's just one machine and you're you know, just sort of, you know Using that as your you know minimal viable products. I think that's great But for me, it's you know to answer that question. It's definitely user engagement Awesome. I love that answer. It's all it's all about the people. It's all about the people who use it Yeah, exactly. Yeah, super cool Okay, okay. Well, hey, that's everything that at least I had in my mind that I wanted to chat with you guys about Um, I don't think I have to tell you. I'm obviously a humongous fan Uh, you guys have been doing phenomenal work and you keep killing it and I'm happy to It's grateful for the opportunity to hang out with you guys and spend some time together So this has been a blast. Thank you. Thank you. Thank you. Yeah. Thanks having us. Yeah. Thanks having us. Thank you