full-disclosure - Re: How to become a Computer Security Professional ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sat, 17 Nov 2007 17:44:23 +0100
From: Fabio Pietrosanti <lists@...osecurity.ch>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: How to become a Computer Security
 Professional ?

Meef wrote:
> What are the steps to follow to become a computer security professional ?,
> to be able to research vulnerabilities ?, code exploits ?  What do I have to
> learn ? and which learning resources and books would be nice ? I've learned
> C programming, C# programming, PHP , SQL and i know how to use Linux and
> right now, i'm learning assembly language and linux programming . is it the
> right way to go ? should I learn Windows programming as well ?
>
> It's always been my dream.
>
> Waiting for any suggestions ?
>   
Stop dreaming.
Buy an offshore university degree in computer science.
Use the CISSP, CISA, CISM, etc, etc certificate title in your email
signature and start writing in mailing lists.
Go at security conferences to meet people and spread your name and if
you want to be really considered cool organize one yourself.
Write some article on some local magazine by translating (stealing)
articles from securityfocus and other international websites.
Setup a blog stating that you are a master in what you do.

Ok, now you can be considered a computer security professional even if
you know nothing about computer security.

With an investment in marketing and personal promotion for a budget of,
mmmmm about 10.000 USD, you should be able
 to became a well valuated computer security professional selling your
activity for a high consultancy daily rate.

Then, don't worry! You can work successfully even if you don't know
anything about security!
Just hire a small consultancy company that provide you serious
professionals at a lower rate than the amount of your invoices and
that's all.

Imho we should think about writing a 'how to became a successful
computer security professional in 30 days' !

-naif

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/