3 ms·
Should I be concerned if my security guy doesn't know what Vim is?
I'm a scientist, not an IT industry veteran, but it did peak my interest when the infosec/compliance security guy for our production environment didn't know what Vim is. Would that be a red flag for most folks?
- mooreds 5y agoWhat is his background and what is your environment? Does he know what a text editor is?
- vpbusvltsmtk 5y agoHow would knowing about a popular text editor discredit a “security guy”
- rolph 5y agoif guy had never heard of Vim id be a little taken aback. however it is a very investigative stance, to say "No, I dont know what vim is, perhaps you could tell me about it."
- elmerfud 5y agoIs he the security guy in charge of the physical building or some other physical security controls or is he the security guy in charge of IT and computer software systems? For one of those options I would say it should be of no concern at all. For the other it would be a red flag to me especially if you run a mix of different operating systems because in order to appropriately evaluate security one must have some passing familiarity with the common tools of those operating systems. Unfortunately my experience in the industry tells me that this security guy probably actually has a job title of security and compliance officer or some such thing. Usually what that means is 99% of what they do is compliance with predefined security requirements and they have no actual ability to understand security and the implications of choices in security. They simply have a compliance check sheet that they run through and you are considered secure and in compliance when you can properly check all the boxes or properly note all of the exceptions. There is very little real IT security that goes on in most places.
- killjoywashere 5y agoffs, yes he's a network security guy, or at least he's playing the role of one.
- icedchai 5y agoI worked with a "security guy" that couldn't even change a password! I had to write step-by-step instructions.
- icedchai 5y agoNot red, but maybe yellow depending on what they're actually doing. I know some security guys that can't use vim. They're basically firewall / network guys.
- Dontloosit 5y agoYes! 100% a red flag.
- incomingpain 5y agoLets say you're talking about infosec and not a security guard. Does 100% of infosec people know about linux cli utilities? No certainly not. Flipside, are you his manager? HR? or something that even makes you care about his competence? Do you want him to get his linux+ certification or something? Why care if he knows anything?
- deleted 5y ago[deleted]