I agree with tptacek here. The common enterprise CISSP I've met seems to have an authoritarian streak, sure. A lot of the ones that work in or were trained by t

I agree with tptacek here. The common enterprise CISSP I've met seems to have an authoritarian streak, sure. A lot of the ones that work in or were trained by the intelligence community, obviously. But a good chunk of the security engineers and vulnerability researchers I've met have a strong distaste for the authoritarian structures, arbitrary hierarchies, and in some case the concept of the state itself.