Originally posted by: Descartes
That's nonsense. Is a vocational programmer less fervent than an avocational one? Of course not. It might be the case, but they're not exclusive. Many of the well-known consultants operating today received their notoriety from what they had done in an avocational capacity. I started doing what I do now for fun when I was young, but that doesn't mean anyone who omits the segue from avocation to vocation is any less able. In a lot of cases this is true, but that's the limit of the person only.
Seems this a defensive response. I also advocated learning and reading all you can....classes also would help, but I have only been slowed down by classes. A classroom is only useful to me if it gives me access to tools that I could not or would not be able to obtain myself reasonably.
I will say 100% if you only do the security portion as your 9-5 job you are merely regurgitating what you learned up to that point and only handling the day to day common problems. It's the rare situations that people that sit around and practice all the time trying to compromise their own security measures that are the best. This is just from a security standpoint....same thing with OS experts, or code snippets, or virii builders....
Can someone take a certification program and do ok? Sure....I wouldn't want him defending anything but a low security setup though.
Take linux admins that run Windows at home...I have met alot, they carry their How To Do Linux books around though....can they solve the problems, yeah....sometimes they have to look it up and that takes time. My brother started using UNIX/Linux exclusively in 1992 or so, maybe even a little earlier. He is part of the higher level Open Source and Beta Testing circle, he is also part of many networking companies initial rollouts, as well as editing consultant to many books. He has no college save a few years, and a stint in the military....he is paid major money as a Chief Technical Officer for a large private ISP. He also does many side jobs in security and hack prevention. He obtained his CCIE + sub certs.
When we were younger during our 'real' hacking days, we'd know about exploits and various problems before anyone else because we were the ones finding them....we'd post bug-reports / security issues and soon the 'kiddies' would read and test the discoveries. Once a business got hit (we would warn businesses we had interests in, but you can't tell everyone) then the Admins would start searching for what the problem is and then what the solution is once they figured out the problem.
A hacker can be a formally trained individual, there are PhD and MD hackers, there are older business men, if you want to be in security you really have to live it to be the best.....if you want to be a 9-5 average joe (more than likely paid very well), take classes or self study: Networking, the OS you want to support, the applications you want to support, figure out the rest you need from there.....if a new browser gets rolled out, start searching for security issues, a new patch the same, etc or you can just install and wait and see.
Å