full-disclosure - [lists] Re: IT security professionals in demand in 2006

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon Dec  5 22:31:20 2005
From: purdy at tecman.com (Curt Purdy)
Subject: [lists] Re: IT security professionals in demand
	in 2006

Jeff Wilder sent:
> Not to validate the cissp... but try to get a good security 
> job with out it. 

I agree Jeff, for some reason it is considered the gold standard, though not
sure why.  Never took a class, studied a single book for a week and knocked
it out in half the 6-hour time period.  The SANS GIAC certs were much more
technical and absolutely required the classes.

I describe the CISSP as a river a mile wide and 6 inches deep, and the SANS
certs as a hundred yards wide and 30 feet deep.

If you spend more on coffee than on IT security, you will be hacked. 
What's more, you deserve to be hacked.
-- former White House cybersecurity czar Richard Clarke 

Curt Purdy CISSP, GSNA, GSEC, CNE, MCSE+I, CCDA
Information Security Officer