3 ms·
A very large percent of infosec consultants don't really know what they're talking about, and only succeed because of the hand-holding their automated and semi-
by ksaj 5y ago
A very large percent of infosec consultants don't really know what they're talking about, and only succeed because of the hand-holding their automated and semi-automated tools afford them.
Most of them refer to themselves as Advanced after taking their first course, even if they have no practical experience on anything other than the type of systems they have at home.
"I just treat it like a black box" really means "I'll just run Nessus and call it a day."
- awb 5y agoI’ve been privy to contracts that specify that the only necessary security implementations are those flagged as medium or high priority vulnerabilities by automated code evaluation tools.