some are bad certs (rote learning, multiple choice), others are not (they have good practical elements). One problem is that some of the "bad certs" e.g. CEH,

some are bad certs (rote learning, multiple choice), others are not (they have good practical elements). One problem is that some of the "bad certs" e.g. CEH, CISSP , are well established. My feeling is that the answer isn't "don't have certs" but "have better certs"