Firewall Wizards mailing list archives

Re: Trust validation of programmers


From: ark () eltex ru
Date: Wed, 1 Jul 1998 13:28:01 GMT

-----BEGIN PGP SIGNED MESSAGE-----

nuqneH,

Rick Smith <rick_smith () securecomputing com> said :

At 08:05 AM 6/26/98 -0400, Ted Doty wrote:

From what I've seen, this situation is more like the craft guilds of the
Renaissance.  Apprentices and journeymen would work under the supervision
of masters, who were not only responsible for the quality of the product,
but for training the apprentices and journeymen as well.

Arguably the training style is like this, particularly in mature
organizations, but there's an essential ingredient missing -- there's no
assurance that a person claiming to be a journeyman or master really is
one. In the Good Old Days you'd practice your craft in the same community
that you trained in, so everyone that mattered knew your status. Today,
someone can walk in off the street with a bogus resume and claim to be an
expert.

I suppose one could say that the CISSP is supposed to address this problem,
though it's nowhere nearly as comprehensive (or costly) as guild style
apprenticeships.

Say more, many people (incl me) will NEVER pay a single cent to ISS for
certification. Don't trust me, don't trust my code, etc, if that does
matter for you. I just don't care. I do not want to. I don't see WHY
should i spend my money.
                                     _     _  _  _  _      _  _
 {::} {::} {::}  CU in Hell          _| o |_ | | _|| |   / _||_|   |_ |_ |_
 (##) (##) (##)        /Arkan#iD    |_  o  _||_| _||_| /   _|  | o |_||_||_|
 [||] [||] [||]            Do i believe in Bible? Hell,man,i've seen one!

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQCVAwUBNZo5YKH/mIJW9LeBAQEBsQP8CQy/ZWBx9/eOaJNVwzuBlNee3xuHu5SN
M7FltTbupSSZVw4JSj6+1RthHQvjm/cpnza4Qtg08S/jGUaZjiZWT5ZSGO2g0wER
xiBwcumP2AR3TrYs4ledIo//4QToCVucDGoevS8jl2MUJwMPalq3D7lsof+g+RRe
ZZ1KKhH5JZM=
=VAJV
-----END PGP SIGNATURE-----



Current thread: