full-disclosure - Re: Hacking Boot camps!: certifications

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <2ba066b20511252022h6bf2529du415882ac305d0126@mail.gmail.com>
Date: Sat Nov 26 04:22:21 2005
From: rs2321 at gmail.com (R S)
Subject: Re: Hacking Boot camps!: certifications

A certification is certainly a plus a get to the door for an interview
(since the door to the interview is usually (wo)manned by
non-tecchnical HR people) and to impress non-technical people. Anyone
touting a certification to a technical person should be shown the door
since they still don't realise how little technical expertise is
actually involved in a certification.  I am certainly not belittiling
the  efforts behind your GIAC if that's what you have, but if you
think it is really worth that much it is wrong.

Hint: Compare how much of technical advancement has happened in the
security field because of published GIAC papers compared to real
technical papers coming out of academia.



On 11/26/05, Exibar <exibar@...lair.com> wrote:
>
> >
> > So am I any smarter for having my CISSP over a GIAC?... I dont think so..
> > but the employeers seem to thing so =)
> >
>
>
> Just to chime in a personal opinion....    The GIAC exams (NOT their new
> Silver level, but the Gold level) is worth more to me than CISSP.  Why do
> you ask.  CISSP only requires you to take an exam, pass, and you get your
> cert.  The GIAC GOLD certs require you to write a paper, of varying length
> per cert, and pass it and 1 or 2 exams in order to get yoru cert.
>    It's one thing to be able to go to a week long class, brush up on a few
> points here and there, take an exam and pass to get a cert, CISSP.
>    It's another copletely different thing to be able to comprehend the
> information enough to be able to write a 20 - 75 page paper on the subject,
> have it read and graded by "experts" in the field, and then get the cert.
> GIAC
>    Even though the GIAC certs generally cover a narrow topic compared to
> CISSP, you have to know your subject quite well in order to be able to pass
> that cert.  Forget about the silver cert for GIAC... just another exam or
> two to pass....
>
>  IF I was interviewing someone new for a security position, I'd certainly
> take this into account before hireing them.  Along with many other factors
> too, of course.
>
>  Exibar
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>