RE: [lists] RE: Hacker Stories, Certs, vs Projects - Was Re: Technitium MAC Address Changer

["Marc Munk" <marc () pungloppen dk>]

I guess it did'nt come out as i wanted it to. As far as I know Sans
doesn't require experience. But I'm quite sure it would be preferred if
you have it. If not for else then for your own sake.

-----Original Message-----
From: Curt Purdy [mailto:purdy () tecman com] 
Sent: 1. august 2006 00:47
To: 'Marc Munk'; ajindal () alumni cmu edu; pen-test () securityfocus com
Subject: RE: [lists] RE: Hacker Stories, Certs, vs Projects - Was Re:
Technitium MAC Address Changer 

Marc Munk wrote:
> I'm facing the same problem as you do. I'v been looking into 
> difference
> sans certifications because they don't require experience but they do
> give some hands on lab work at the training. Not to mention the
> possibility to take a gold level cert. by writing an assignment. But I
> don't have any security certs or experience in the area.
<snip>

I disagree with your statement about SANS GIAC certs not requiring
experience.  I have a lot of grey hair and passed the CISSP on first try
in
half the allotted six hours, but don't believe I could have passed the
GIACs
without the training.  I refer to CISSP as a river a mile wide but six
inches deep.  The GIACs are 100 yards wide and 50 feet deep.


Curt Purdy CISSP, GSNA, GSEC, CNE, MCSE+I, CCDA 
Information Security Officer 
Information Systems Security
infosysec.net
443.846.4231

-------------

If you spend more on coffee than on IT security, you will be hacked. 
What's more, you deserve to be hacked. 
-- former White House cybersecurity czar Richard Clarke 
 



------------------------------------------------------------------------------
This List Sponsored by: Cenzic

Concerned about Web Application Security? 
Why not go with the #1 solution - Cenzic, the only one to win the Analyst's 
Choice Award from eWeek. As attacks through web applications continue to rise, 
you need to proactively protect your applications from hackers. Cenzic has the 
most comprehensive solutions to meet your application security penetration 
testing and vulnerability management needs. You have an option to go with a 
managed service (Cenzic ClickToSecure) or an enterprise software 
(Cenzic Hailstorm). Download FREE whitepaper on how a managed service can 
help you: http://www.cenzic.com/news_events/wpappsec.php 
And, now for a limited time we can do a FREE audit for you to confirm your 
results from other product. Contact us at request () cenzic com for details.
------------------------------------------------------------------------------