Pinned Tweet
People keep asking me how I got into IT.
I got into IT because I was too socially awkward for sales and too impatient for engineering.
In 2009, I was the only IT person at a 40-person startup.
Everything was my fault. Server down? My fault. Email slow? My fault. Someone's laptop got a virus because they opened an email from their own mother? Also my fault, apparently.
One day the CEO asked me why our internet was "acting slow." I told him it was probably DNS. I had no idea what DNS was. I just knew it was the answer to everything.
He asked me to fix it. I told him I needed $8K in equipment and three weeks.
I spent two weeks watching YouTube videos about DNS, bought $200 in equipment, and told him it was fixed.
It wasn't. The internet was still slow. But nobody asked about it again because a month later the company ran out of money and shut down.
I got hired at the next place and immediately told them our DNS was probably the problem. They believed me. That was 15 years ago.
I'm now an IT Director at a Fortune 500 company. My entire career is built on the fact that I got lucky once and nobody's fact-checked me since.
Last month someone asked me a technical question during a meeting and I just said "DNS" and everyone nodded and moved on.
I'm convinced my entire C-suite reputation is based on a YouTube video from 2009 I watched while pretending to work.
The library fined me $18 because I was busy raiding.
I had 6 books checked out.
3 were due on the same Tuesday as our Classic WoW raid.
I remembered at 12:14 AM.
Too late.
The library already had my email address, due dates, and an online renewal button.
This felt solvable.
I wrote a script that checks my account every night and renews anything due within 48 hours.
If another reader has a hold, it tells me to return it.
I called it Circulation Continuity Assurance.
That phrase means nothing.
It means I don't want overdue fines because Ragnaros ran long.
The script has renewed 27 books automatically.
My fines have been $0 since March.
Last Tuesday, 2 books renewed during the raid.
The library thinks I'm responsible now.
I was standing in Blackrock Mountain.
A plumber gave me a 4-hour arrival window, which I considered a personal attack.
He was coming between 8:00 AM and noon.
That meant being awake at 8:00 for something that might happen at 11:58.
The confirmation text had a tracking link.
I opened it.
The page exposed the truck's updated arrival estimate every few minutes.
So I wrote a shortcut that checked the estimate and rang my phone when it dropped below 15 minutes.
I called it Residential Service Presence Telemetry.
That phrase means nothing.
It means wake me up when the plumber is actually close.
At 8:03, the estimate said 11:20.
I went back to sleep.
My phone rang at 10:54.
The plumber arrived at 11:06.
He apologized for the wait.
I said no problem.
I had only been waiting for 12 minutes.
By Tuesday afternoon, 73 SaaS status emails had convinced me outages needed less communication.
Every vendor sends updates.
Investigating.
Identified.
Monitoring.
Resolved.
Sometimes 9 emails for 1 incident.
I was getting more notifications about broken software than actual broken software.
So I built a tiny service that grouped updates by vendor and incident.
One message when it started.
One when it ended.
I called it Incident Signal Convergence.
That phrase means nothing.
It means I don't need 7 emails saying Salesforce is still broken.
Security asked whether consolidating alerts could hide important changes.
I kept severity escalations immediate.
Everything else got bundled.
Within a month, incident email volume dropped 81%.
Operations adopted it.
Then Support did too.
Tuesday night, 4 vendors had incidents.
I received 8 emails.
I also cleared Molten Core before bed.
Both systems were stable by midnight.
Security made phishing reports so successful that nobody could do any work.
Employees were told to report anything suspicious.
They listened.
By Tuesday, IT had 480 reports.
Newsletters.
DocuSign emails.
Shipping notifications.
One employee reported the company holiday invitation.
I was reviewing screenshots instead of sleeping after lunch.
So I grouped known senders, authenticated domains, and previously approved services into a trusted layer.
I called it Benign Sender Confidence Propagation.
That phrase means nothing.
It means stop sending me screenshots of FedEx.
Security tested it for 30 days.
False-positive reports dropped 68%.
Actual phishing reports stayed flat.
They rolled it out company-wide.
Then they presented the reduction as evidence that security awareness training was working.
Fine.
At 2:15, my queue was empty.
At 2:16, so was my calendar.
I slept until 2:47.
My corporate card declined a $185 Wagyu ribeye in front of a client.
The card worked at lunch.
It worked at the hotel.
At the steakhouse it declined twice.
I used my personal card and checked the expense app.
Finance had blocked the restaurant's merchant category because it was coded as “bar/nightclub.”
The restaurant had white tablecloths and a sommelier.
Nobody was dancing.
I pulled 6 months of declined transactions.
23 legitimate restaurants had the same problem.
I called it Merchant Classification Integrity Drift.
That phrase means nothing.
It means Visa categories are weird.
Finance changed the policy to allow the category when an itemized receipt showed food.
My expense was approved.
The client dinner was reimbursed.
Finance thanked me for finding $7,800 in improperly declined meals.
The Wagyu tasted much better after the approval email.
Facilities wanted me to label 640 network cables by hand.
A building audit found several patch-panel labels didn't match the spreadsheet.
Their solution was sending IT into 8 closets with a label maker.
My solution was not doing that.
The switches already knew which ports were active and what was connected.
I exported the topology, matched it to the floor plan, and printed labels automatically.
I called the process Physical Link Identity Reconciliation.
That phrase means nothing.
It means the switch knows where the cable goes better than Kevin with a clipboard.
Facilities tested 30 ports.
29 matched.
Port 30 went to a desk that had moved 2 years earlier.
They updated the floor plan.
Then they approved automated labeling for all 8 closets.
My Saturday cabling shift was canceled.
I spent 6 hours playing Classic WoW.
Not 1 cable was harmed.
Copying 2 lines from Teams into Jira became impossible after Security “fixed” data loss.
Their new browser policy blocked copy and paste between managed applications.
The goal was stopping sensitive data from leaving approved tools.
Unfortunately, Teams and Jira were both approved tools.
I spent Monday retyping ticket numbers like it was 1998.
By lunch I'd had enough.
I created an exception for Managed Context Transfer Continuity.
That phrase means nothing.
It means Ctrl+C should work between 2 company apps.
Security asked how we'd prevent copying into personal websites.
I scoped the exception to our approved domains.
It worked.
Then Engineering wanted it.
Then Legal.
Security eventually made it the default.
They called it granular DLP enforcement.
I called my 3:00 PM calendar block “architecture.”
I copied 1 final ticket number.
Then I locked my door and took a nap.
IT Unprofessional retweeted
My dog trained me to wake up at 5:41 AM, so I changed his timezone.
He'd learned that whining beside the bed eventually produced breakfast.
My wife said we needed to train him.
I trained the feeder.
I moved breakfast from 5:45 to 6:00.
Then 6:15.
Then 6:30.
Every 4 days, another 15 minutes.
Eventually he stopped waking us.
Then daylight saving time hit.
The feeder shifted.
Breakfast arrived an hour early.
Within 3 days, he was back beside the bed at 5:42.
So I changed the feeder to UTC.
My wife asked why the dog's breakfast now depended on international time standards.
Because local time had already betrayed us once.
He currently eats at 7:03.
I wake up at 7:00.
He gets 3 minutes of operational lead time.
Anything more encourages scope creep.
“DO NOT ERASE” became an official IT control because Facilities kept destroying my notes.
The cleaning crew erased every whiteboard Friday night.
Including the one beside my desk.
Sometimes it had network diagrams.
Mostly it had things I didn't want to rewrite Monday.
I put a paper sign on it.
They erased around the sign.
So I told Facilities certain IT whiteboards contained Active Incident State Preservation.
I made that phrase up.
It means leave my drawings alone.
Security liked the idea enough to request red magnetic tags for protected boards.
Now cleaners skip any board with one.
Facilities ordered 50 tags.
IT uses 6.
I have 11 in my drawer.
Last Friday my board contained no incident data.
It contained our Classic WoW raid assignments.
The diagram survived the weekend.
Ragnaros did not.
A middle seat cost the company $1,400.
Travel booked me Basic Economy because it was $63 cheaper.
I couldn't pick a seat.
I got 34B between 2 men who both believed the armrests were inherited property.
I didn't sleep for 5 hours.
The next morning I pulled our travel data.
Basic Economy also had no same-day changes, worse cancellation terms, and 41 paid seat assignments from employees trying to escape middle seats.
I called it Traveler Recovery Flexibility Exposure.
That phrase means nothing.
It means the cheapest ticket wasn't always cheap.
Finance compared total costs.
Travel banned Basic Economy for trips over 3 hours.
The next month I got an aisle seat with free changes.
I boarded, put on noise-canceling headphones, and slept until landing.
The ticket cost $71 more.
Nobody touched my armrest.
I turned 312 access approvals into a Wagyu lunch.
Every quarter, managers had to reapprove every system their employees could access.
My team had 312 permissions across 26 people.
The review meeting was scheduled for 2 hours.
I wanted lunch.
So I compared this quarter's permissions to last quarter's and automatically carried forward anything that hadn't changed.
Only 7 items needed a human.
Audit asked why unchanged access wasn't being manually reviewed.
I called it Privilege Stability Inheritance.
That phrase means nothing.
It means if nobody changed jobs, I wasn't clicking 305 identical boxes.
Audit sampled 20 permissions.
All 20 were correct.
Then they approved the method for every department.
The 2-hour meeting disappeared.
I booked a table across the street.
At 12:30, HR was reviewing 418 permissions manually.
I was eating Wagyu.
Christmas technical support ended when I confiscated 5 printers.
My parents, sister, uncle, and mother-in-law all owned different models.
Every holiday became unpaid printer support.
Ink problem.
Wi-Fi problem.
Driver problem.
One printer claimed it was offline while actively printing.
So last Christmas I bought everyone the exact same model.
Then I took the old printers home and recycled them before anyone could object.
I called it Household Peripheral Attack-Surface Compression.
That phrase means nothing.
It means I only want to learn 1 printer.
Now everyone uses the same toner, app, driver, and error messages.
Last month my uncle fixed my mother's paper jam over FaceTime.
On Easter they handled a toner problem without calling me.
I took a nap through dessert.
An executive deleted a dinner reservation 4 times and somehow launched our new “AI email recovery.”
Every time he deleted something important, he'd call me personally.
Not the help desk.
Me.
The 4th time was an OpenTable confirmation.
I restored it in 12 seconds.
Then I enabled Microsoft's self-service recovery feature.
It had already existed for years.
He said he didn't want to learn another tool.
So I changed the deleted-item message from CONTACT IT to RECOVER ITEM.
He clicked it.
His email came back.
He told the executive team IT had launched an AI recovery system.
Restore tickets dropped 58%.
Leadership praised the rollout.
Our revolutionary AI product is a button Outlook has had forever.
A missing flashlight triggered a server-room page and ruined my sleep.
Facilities opened Rack 12 looking for one.
The door sensor immediately paged me.
Nothing was wrong.
No server moved.
No cable changed.
Just a flashlight and my 1:14 AM heart rate.
The next morning I changed the alert.
Rack doors only page IT if they're open longer than 10 minutes or something inside actually disappears.
I called it Correlated Physical Intrusion Validation.
That phrase means nothing.
It means 1 dumb sensor doesn't get to wake me up.
Security loved it.
They applied the same logic to 11 other noisy alerts.
Overnight pages dropped 64%.
Facilities found the flashlight 2 days later.
It was in Rack 11.
A vendor mailed me a $900 espresso machine.
Compliance said gifts over $100 had to be returned.
I didn't even want it.
I already own a better one.
What bothered me was driving it to FedEx.
So I told the vendor we couldn't accept physical gifts because of Unverified Supply-Chain Ingress Exposure.
I invented that phrase while staring at the box.
He apologized immediately.
Then he asked if business meals were allowed.
Compliance permits meals under $250 per person with a legitimate business discussion.
Interesting.
The next week we met at a steakhouse.
We discussed his software for 11 minutes.
Then I ate a $180 Wagyu ribeye.
His product didn't make the shortlist.
Compliance got the espresso machine back.
I kept dinner.
Procurement wanted 3 software demos before renewing the tool we'd used for 7 years.
Each demo was 90 minutes.
Nothing was wrong with our current platform.
Policy just said “competitive evaluation.”
Absolutely not.
I wrote an exception for Operational Telemetry Continuity Preservation.
That sounds real enough to survive Procurement.
It means I didn't want to watch 3 salespeople explain dashboards.
Procurement asked Security whether replacing a monitoring platform could introduce risk.
Security said yes.
Security always says yes.
Suddenly doing nothing was the responsible option.
Procurement approved the renewal and added my exception to policy.
Nobody has defined “operational telemetry.”
The incumbent rep still sent me a 46-slide renewal presentation.
I marked it reviewed.
I built an 8-week surveillance case against my neighbor over a leaf blower.
The HOA rules say landscaping noise can't start before 8:00 AM.
Steve kept starting around 7:00.
He said it wasn't him.
Unfortunately, my doorbell camera has audio.
I exported 8 Saturdays.
Average start time: 7:06.
Earliest: 6:58.
Then I made a graph.
I called it Residential Acoustic Event Correlation.
That phrase means nothing.
It means Steve is loud.
Steve argued my timestamps could be wrong.
The HOA asked me to verify the camera clock.
It was off by 0.4 seconds.
Steve now starts at 8:01.
Last Saturday he waited until exactly 8:00, looked directly at my camera, and started the blower.
Fair.
The COO handed me a Bluetooth meat thermometer and asked me to “take a look.”
That was the 9th personal gadget he'd brought IT that month.
AirPods.
Kindle.
Garmin.
His wife's iPad.
Now meat.
I created a service category called Non-Corporate Executive Peripheral Support.
Each request put a $250 charge against the executive's monthly IT allocation.
No money actually moved.
They just had to look at it.
I called the risk Personal Device Support Boundary Erosion.
That phrase means nothing.
It means I don't want to troubleshoot your brisket.
The COO stopped bringing me gadgets after his department showed $1,750 in nonstandard support.
Last week he asked if I'd look at his new smart scale.
I sent him the service link.
He said never mind.
His weight remains unsupported.
Finance wanted me to spend Saturday counting 1,842 devices with a clipboard.
Laptop.
Monitor.
Dock.
Phone.
Everything.
I had a raid at 1:00 PM.
So I combined MDM check-ins, switch-port activity, and serial numbers.
Anything that had checked in from a known office within 30 days counted as present.
I called it Passive Asset Presence Attestation.
That phrase means nothing.
It means the laptop said hello recently.
Finance sampled 40 devices.
We found 39 immediately.
The 40th was under someone's desk.
They approved the methodology.
The physical inventory was canceled.
Saturday afternoon Finance thought I was validating $2 million in assets.
I was in Molten Core arguing about a helmet.


