Tag: CISSP

  • Why You Should Not Get a CISSP

    At DEFCON 20, Timmay gave a presentation on the supposed merit of the CISSP certification. It included several reasons why he felt the certification was based more on ISC(2) market hype than an actual value. He asked Jericho to contribute and present a handful of slides (pages 37 – 43) regarding the ISC(2) Code of…

  • My Canons on (ISC)² Ethics – Such as They Are

    [This was originally published on Infosec Island, and then attrition.org.] The International Information Systems Security Certification Consortium, Inc., (ISC)², bills themselves as “the global, not-for-profit leader in educating and certifying information security professionals throughout their careers.” They are probably most well-known for their CISSP® – Certified Information Systems Security Professional. With 5 years of experience, practice in two…

  • Rebuttal: The Curious Case of Sam Bowne

    [This was originally published on attrition.org. This is a rebuttal piece to Sam Bowne, the person, Twitter personality (@sambowne), City College San Francisco professor and self-proclaimed whitehat hacker.] Background: I was first introduced to Sam when noted charlatan Gregory D. Evans accused Bowne of being one of the “world’s biggest cyber bully’s” (sic). I was briefly involved in an e-mail…