full-disclosure - Training & Certifications

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20040405221811.9708542F7D@maja.zesoi.fer.hr>
From: Bojan.Zdrnja at LSS.hr (Bojan Zdrnja)
Subject: Training & Certifications

> -----Original Message-----
> From: full-disclosure-admin@...ts.netsys.com 
> [mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of 
> Ron DuFresne
> Sent: Tuesday, 6 April 2004 6:16 a.m.
> To: Dave Howe
> Cc: Email List: Full Disclosure; Laura Taylor
> Subject: Re: [Full-Disclosure] Training & Certifications
> 
> process for certification was not consistent with the concept of "trust,
> but verify" and I ended up not hiring the person I had originally
> interviewed.

If that was the reason for not hiring the person, good for him then!

> If a certification cannot be verified, to me it is worthless. I'd rather
> hire an MCSE because Microsoft is willing to verify all their
certifications.

If you went to ISC2's site and go to Directory of CISSPs and SSCPs and read:

"... ISC2 will continue to respond to any employer requests for (ISC)2
credential holder verifications. Such requests must be in writing on the
employer's company letterhead and a release signature from the CISSP/SSCP
must be included in the request. "

Bojan