Great Circle Associates Firewalls
(February 1998)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: RE: Certifiying Security Auditors -reply
From: Anton J Aylward <anton @ the-wire . com>
Date: Tue, 17 Feb 1998 08:16:56 -0500
To: "gcrum @ us-state . gov" <gcrum @ us-state . gov>
Cc: "firewalls @ GreatCircle . COM" <firewalls @ GreatCircle . COM>

At 06:50 AM 17/02/98 -0500, Gary Crumrine wrote:


> I also think that for one thing, we rely on tools way too much.  

YES YES YES
Tools come and go, but underlying principles remain.
Of what I learn at university @#$ years ago, what remains
valid today?  Maxwells equations, Ohms law, and lots of other
fundamental maths.   Are any of the machines I used still in
existence? NO!  Are the instruction sets still in use? NO!
Even the mercury of the delay lines has been recycled to 
other purposes.

>Everyone 
>is in agreement that the tools mentioned below have taken on the look of 
>being considered the quote unquote standard that everyone measures against, 

Everyone except the hackers who realise that these tools are 
just giving a false sense of security because the people don't 
know how to interpret their results and use them as crutch.


Can we please get back to the certifications which do exist, 
things like the CISSP and others which have been discussed 
in this thread, and get away from this obsession with technologies.
Certifivcation does exist, and it does count for something.
Lets stop pretending it doesn't exist.

/anton




Follow-Ups:
Indexed By Date Previous: RE: Security Auditor versus Security Auditor was Re: Certifying Security Auditors
From: Anton J Aylward <anton @ the-wire . com>
Next: Re: Certifiying Security Auditors -reply
From: Anton J Aylward <anton @ the-wire . com>
Indexed By Thread Previous: Re: Certifiying Security Auditors
From: Mark Teicher <mht @ clark . net>
Next: RE: Certifiying Security Auditors -reply
From: Mark Teicher <mht @ clark . net>

Google
 
Search Internet Search www.greatcircle.com