Sadly, 90% of "security professionals" give the rest a bad name. Unfortunately, for whatever reasons, large bureaucracies seem to have decided that, after doin

Sadly, 90% of "security professionals" give the rest a bad name. Unfortunately, for whatever reasons, large bureaucracies seem to have decided that, after doing the same thing to network engineering and systems administration, computer security is just a dump profession in which you put slightly dim people who are only good at repeating mantras. For every pen tester or true security expert who breaks things for fun in their spare time, I've run into far too many more of the "just make the vulnerability scanner turn green" type. It's quite unfair actually that they get lumped together.