3 ms·

To me their worth is at best questionable and a lot of the time just a scam. I don't like to spend time on any, and there are definitely better ways to spend t

To me their worth is at best questionable and a lot of the time just a scam. I don't like to spend time on any, and there are definitely better ways to spend the time it would take to acquire many. CEH is a bad cert, and I have my doubts about the rest. I think whether they're useful is extremely dependent on your own circumstances, which should already inspire some doubts. College degrees don't exactly have that problem. If you're switching careers they can be a great thing to point to on a resume, but I definitely don't think of them personally as hugely reflective of someone's skill. It's better to support it with something else. The only one that I would break this assumption on right now is OSCP, but the exam is grueling and not something that I think people should be subjected to just to get a stamp of approval in the industry. I would say that someone who has it knows offensive security pretty well, something that I could not as definitively say about something like Sec+. I can't personally speak to Cisco certs.

sersi 5y ago
Problem with the OSCP is that they decided to now have proctors watching through a webcam for the duration of the exam (24 hours). Not sure if a lot of people in the industry are comfortable with such a gross invasion of their privacy. Otherwise, I'd say that the courses are not very good but the labs are really well made and the exam is definitely interesting (but I would never try another exam from them now that they implemented that proctoring rule)
- ozim 5y ago
  Currently I am considering that OSCP is losing its appeal for me, I see in my linkedin feed a lot of people showing it off. Well they are still better than me for sure, I can do some easy boxes on HackTheBox maybe some Linux medium. In the end life is not like CTF and we had guy doing pentest like a CTF, where I wanted more broad approach and was trying to explain to him what we want to cover but well I was not the one pulling the trigger and my boss was paying so the guy did what he thought would be the best. From my point of view he missed a lot of low hanging fruit that I wanted to fix. Then he found bunch of BS issues and marked those as critical. My boss at first got mad how we can have such critical issues but after explaining what is what, we don't think about hiring that guy again.

sersi 5y ago

Problem with the OSCP is that they decided to now have proctors watching through a webcam for the duration of the exam (24 hours). Not sure if a lot of people in the industry are comfortable with such a gross invasion of their privacy. Otherwise, I'd say that the courses are not very good but the labs are really well made and the exam is definitely interesting (but I would never try another exam from them now that they implemented that proctoring rule)

ozim 5y ago
Currently I am considering that OSCP is losing its appeal for me, I see in my linkedin feed a lot of people showing it off. Well they are still better than me for sure, I can do some easy boxes on HackTheBox maybe some Linux medium. In the end life is not like CTF and we had guy doing pentest like a CTF, where I wanted more broad approach and was trying to explain to him what we want to cover but well I was not the one pulling the trigger and my boss was paying so the guy did what he thought would be the best. From my point of view he missed a lot of low hanging fruit that I wanted to fix. Then he found bunch of BS issues and marked those as critical. My boss at first got mad how we can have such critical issues but after explaining what is what, we don't think about hiring that guy again.