The Cuckoo’s Egg is the autobiographical account of an astronomy student who’s grant ran out so he got a job in the university’s IT department. A 75 cent discrepancy in the accounting software would lead him down a rabbit hole of hackers, military and national security systems, and academia. This all being told from the author’s experiences it is a fascinating tale of the very real world of cyber security in the twilight years of the Cold War.
I read this book around 2005, as I was working towards an associate’s degree in information technology. It was easily my first exposure to actual cybersecurity in the real world. As an impressionable teen it got my mind spinning in very attack vs. defense modalities. Also, I mentioned the book to my friend’s mom and she replied, “Oh, Cliff wrote a book? I didn’t know. I guess he probably wasn’t able to talk about it back then. Yeah, I used to debug some of his code, he was a lousey programmer.” This coming from an already fascinating woman who would later handle sewing all of my uniform patches because it reminded her of her time in uniform. Stories for another day though…
A lot of the book stood out to me for how timeless the challenges of operational security are. The events of the book are in the mid 1980s, I was reading it around 2005, and now in 2026 we are still telling people, “Do not write down your password. Do not share your password with others. Do not reuse your password. Do not make your password something easy to guess.” Yeah, none of that has changed really. It has gotten more layered and dense but we also have better tools like multifactor authentication, password managers, and server side checks like heuristics and impossible travel detection.
Recommendation
If you want to learn about the history of cyber security, or want to get into it, or are just plain curious about the subject this is a great book. It dives into the non-technical aspects of the career like shifting corporate and legal policies, disinterested user bases, and the eternal vigilance required to stand against ne’er-do-wells. The rise of globalization coupled with regulatory schemes such GDPR (General Data Protection Regulation) have only made jurisdictional and compliance matters harder for IT workers of all stripes. Even after a steady march forward for easier and easier to use authentication, there are still many places where you end up falling back on a simple password. These transactions have all the problems surrounding single factor, known secrets (in NIST parlance) that we can see present as far back as in this book. SPOILERS: In the final scenes of The Wire you see where the old people all move on, and new ones step up to fill their roles. You see that in the end nothing really changed. The Cuckoo’s Egg is the before picture for a product that doesn’t work. While that can be deeply depressing at times, it is also the reason I can pay my mortgage, as no matter far we come we will always need people to fix the broken bit, smooth the sharp corners, and reset the email password on a holiday weekend.