> The problem I have with pen tests is that they're not systematic and rely on the cleverness and knowledged of the tester. It really does take skill to accomp

> The problem I have with pen tests is that they're not systematic and rely on the cleverness and knowledged of the tester. It really does take skill to accomplish some things and breaching defenses (and protecting from breaches) is one of those. Be it a pen tester vs the blue team or a foreign spy and the intelligence agencies thwarting them, when there’s one and one against another it really does come down to the skills, persistency, and resources of the people on both ends, and a bit of luck. There’s just so many variables and as long as there’s people involved there’s a vulnerability somewhere that can be exploited that needs someone to wake up that day and use his mind and body to defend it.