I was up doing labs when the Discord message came through.
It was late. The kind of time when you’re not being productive anymore, you’re just following the thread of something interesting. A machine you wanted to understand. A technique you wanted to try. Something that pulled you into the rabbit hole and kept you there past when sleep probably made more sense.
I saw the notification from someone I respect. Someone who’s been in this space longer than most. Someone whose work I’ve seen referenced in conversations. Someone who matters.
We chatted for a bit. Small talk about what we were both working on.
Then I asked: “What are you doing up this late?”
The answer was casual. “Just trying out some new labs. Wanted to see how they’re structured.”
And that’s when something clicked.
The Thing That Clicked
He doesn’t have to be doing labs at midnight.
Not because he’s lazy or done learning. But because by any reasonable measure, he’s already made it. Years in the industry. Respect. Credentials. The kind of experience that most people point to and say “okay, you can stop now, you’ve won.”
And he’s still curious.
Not desperately trying to stay relevant. Not grinding toward the next cert or the next title. Just… still interested. Still tinkering. Still wanting to understand how something works.
That’s different from the grind. That’s curiosity as a permanent state, not a temporary tool you use until you reach a destination.
Why This Matters
There’s a narrative in cybersecurity that goes like this: you work hard, you learn the fundamentals, you get the certifications, you climb the ladder, and eventually you arrive at a place where you can coast.
You’ve paid your dues. You’ve earned the right to stop pushing.
And some people do. They get comfortable. They trade the lab work for management or politics or just comfortable stagnation. Nothing wrong with that - life has seasons, and cybersecurity doesn’t have to be forever.
But the people who actually matter? The ones who stay dangerous, stay interesting, stay valuable? They never stop being the person who tinkers.
They don’t tinker because they have to. They tinker because they can’t help it. Because there’s something about understanding how systems work that won’t let them rest.
That’s not ambition. That’s curiosity.
And curiosity doesn’t age out.
The Difference This Makes
Here’s what I’ve noticed: credentials expire. Knowledge becomes outdated. Skills decay if you don’t use them. Titles get shuffled around. Reputations fade.
But curiosity? Curiosity keeps you sharp in ways that nothing else does.
A curious person will pick up new tools because they want to understand them. A curious person will read about attacks they’ll probably never see because they want to know how they work. A curious person will be in the lab at midnight not because they’re trying to prove something, but because the work itself won’t let them stop.
That’s the filter. That’s the thing that separates the people who stick around from the people who burn out or ghost or plateau.
And the thing about curiosity is that it doesn’t require anything external. It doesn’t care about your job title or your paycheck or whether your work is “relevant to your career goals.” Curiosity is self-sustaining. It feeds itself.
Which means the people with real curiosity will still be learning, still be growing, still be dangerous, 10 years from now. 20 years from now. As long as they want to be.
What This Means For Right Now
When I started in CTFs, I was doing it to build skills. To get better. To prove something.
That was necessary. You need that initial drive.
But somewhere along the way, the thing shifted. The competitions stopped being the point. The writeups stopped being portfolio pieces. The community work stopped being networking.
The point became the work itself. The curiosity that won’t let you stop even when you could.
And seeing someone who’s further along the path still in that same space - still curious, still tinkering, still trying new things - that’s the evidence that it’s real.
That this isn’t a sprint to a destination. It’s a permanent state for people who can’t help it.
The Question
Here’s the thing I’m sitting with now: will I still be curious in 10 years?
Not because it’s expected of me. Not because I need to stay relevant. But because I genuinely can’t help it. Because the work pulls me in the same way it’s pulling that legend in the lab at midnight.
That’s the real test. Not “can I make it to the next level” but “will I still want to be here when I don’t have to be?”
And talking to someone who’s already answered that question with their actions - by being in the lab at midnight, years into their career, just because they wanted to understand something new - that changes how I think about what I’m doing.
It’s not about arriving somewhere. It’s about staying curious long enough that the work becomes the destination.
Curiosity doesn’t age out. Everything else does.
The labs at midnight aren’t a flex. They’re evidence of something that lasts.