RE: [Full-disclosure] Re: CISSP Test

From: Forbes, Robert R (Robert_Forbes_at_reyrey.com)
Date: 03/22/05

  • Next message: Roy Hills: "[Full-disclosure] Nortel VPN Client Issue: Clear-text password stored in memory"
    Date: Tue, 22 Mar 2005 14:18:20 -0500
    To: "Andre Ludwig" <andre.ludwig@gmail.com>, <robert@dyadsecurity.com>
    
    

    Well Put Andre :-)

    -----Original Message-----
    From: full-disclosure-bounces@lists.grok.org.uk
    [mailto:full-disclosure-bounces@lists.grok.org.uk] On Behalf Of Andre
    Ludwig
    Sent: Tuesday, March 22, 2005 1:37 PM
    To: robert@dyadsecurity.com
    Cc: full-disclosure@lists.grok.org.uk; bugtraq@securityfocus.com
    Subject: Re: [Full-disclosure] Re: CISSP Test

    So much haterade it could drown a NFL football team.

    The CISSP is good for a few reasons.

    It exposes all of us packet heads to weird things that we may or may
    not normally do in our day to day grind. While a mm deep and a mile
    wide is apt at describing it from a knowledge point of view, it is
    that very notion that makes the CISSP worth something. For me it
    comes back to the whole "why do i need a degree? i am smartar then
    those edumacted foolz upstairs any hoo!". For me the value add was
    that i got to learn a bit about stuff that was "out of the box" that i
    have worked myself into via specialization. Meaning it exposed me to
    all sorts of fun stuff like management issues of IA policies, legal
    aspects of Infosec, and all that warm gooey goodness.

    Does it make me a more well rounded individual? You bet, ever since i
    added those fine words to my name I have been pimping bitches to no
    end. I mean the womenz just melt when you tell them you are a
    Certified Informant ion Systems Security Professional. It just has
    that ring to it.

    Is it the ultimate in geek mental masturbatory bling? NOPE (i think
    the SANS GSE is at this point)

    Does it make those ever so sezzy HR chicks melt? Yup
    Oh and it makes your boss all tingly with pride when he goes on
    sales/business lunches.

    So to recap, CISSP is good for its prestige and ability to show the
    hardest core of geeks that there is more then reverse engineering
    binaries when it comes to Infosec. If you all ready know all the
    domains inside and out to a point where studying INDEPTH the Knowledge
    base, then what in the hell are you doing on this list? You should be
    out r00ting Iranian nuke plants while living in that bunker that the
    DIA keeps you in.

    Cheers

    Dre

    On Tue, 22 Mar 2005 10:18:40 -0800, robert@dyadsecurity.com
    <robert@dyadsecurity.com> wrote:
    > Vladamir(wireless.insecurity@gmail.com)@Tue, Mar 22, 2005 at
    10:36:25AM -0500:
    > > I have heard conflicting views of the CISSP exam, is it worth it?
    >
    > Depends on what you want out of it. Go to www.hotjobs.com or dice.com
    and type in CISSP. You'll see lot's of good jobs that list CISSP as
    either a requirement or a desired background.
    >
    > That said, I heard a joke recently that goes something like this:
    > "Getting your CISSP and trying to work in the Information Security
    field is a bit like reading the Hardy Boys series and applying for a job
    at the FBI... except that's not really fair to the Hardy Boys, as that
    series actually does cover some investigation and espionage techniques."
    >
    > I'm not sure how we got to the point where the CISSP became so
    popular. The test has very little to do with security. In fact, you
    will get throgh the CISSP test less confused and with a higher test
    score the less you actually know about security. Just get the Boson
    test prep and you should pass the first time you try.
    >
    > And if you do pass, please, please, don't affix it to the end of your
    name. One of the easiest ways to find out if the email is even worth
    reading is if the poster has CISSP as part of their name. If they do,
    it's usually safe to hit delete before you get more confused :).
    >
    > Robert
    >
    > --
    > Robert E. Lee
    > CEO, Dyad Security, Inc.
    > W - http://www.dyadsecurity.com
    > E - robert@dyadsecurity.com
    > M - (949) 394-2033
    > _______________________________________________
    > Full-Disclosure - We believe in it.
    > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
    > Hosted and sponsored by Secunia - http://secunia.com/
    >
    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.grok.org.uk/full-disclosure-charter.html
    Hosted and sponsored by Secunia - http://secunia.com/
    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.grok.org.uk/full-disclosure-charter.html
    Hosted and sponsored by Secunia - http://secunia.com/


  • Next message: Roy Hills: "[Full-disclosure] Nortel VPN Client Issue: Clear-text password stored in memory"

    Relevant Pages

    • Re: CISSP Question
      ... Have a minimum of four years of direct full-time security professional ... You don't have to be affiliated with an organization to take the CISSP ... ISACA does have a standard that is used in many places. ...
      (Security-Basics)
    • RE: CISSP Question
      ... 2 Market Street Sydney NSW 2000 ... Subject: CISSP Question ... I am working VERY hard now to get my Masters in Information Systems Security as I am in a dead-end job as a Paralegal. ... To qualify for CISSP, you should have at least four years of experience in one ...
      (Security-Basics)
    • RE: Hacker Stories, Certs, vs Projects - Was Re: Technitium MAC Address Changer v3.1 (FREEWARE)
      ... you do not need 6 years of "security" work you only need to have ... you do not need to have a CISSP vouch for your experience. ... Credentials can only be looked at to strengthen the credibility of a ... You have an option to go with a managed service (Cenzic ...
      (Pen-Test)
    • RE: Hacker Stories, Certs, vs Projects - Was Re: Technitium MAC Address Changer v3.1 (FREEWARE)
      ... general security credential. ... I understand that a CISSP can tell me that ... Credentials can only be looked at to strengthen the credibility of a ... Download FREE whitepaper on how a managed service ...
      (Pen-Test)
    • RE: question about CISSP experience requirements
      ... got my CISSP a some years back so there is some ... should specifically identify security experience. ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ... The NSA has designated Norwich University a center ...
      (Security-Basics)

  • Quantcast