As somebody who works in the industry, I'm hardly surprised by this, although ~99% is pretty crazy. There seems to be a much higher percentage of snake oil/pret

As somebody who works in the industry, I'm hardly surprised by this, although ~99% is pretty crazy. There seems to be a much higher percentage of snake oil/pretend vs. real deal in security than other industries. There are some really, really smart people, and then there's this vast horde of people who've remembered a list of buzzwords and not much else. I guess that's partly because it's so easy to get away with not producing any actual results since they are so hard to quantify--at least when kids with Metasploit and Sqlmap aren't out to get you :)