Mitja Kolsek last 15 years of infosec career comprise co-running a small security outfit which ran APT-like attack simulations before China was guilty of everything, using SQL injection before it had a name, and discovering vulnerability types which were previously unknown. In contrast to just finding and exploiting vulnerabilities, his next 15 years will be augmented by fixing them. Most of all he'd like to leave information security some day in a state where it'll be darn difficult to break into a typical network deploying standard and inexpensive security solutions.