Re: [GPWN-list] breaking in to security, trying to get answers

[Josh More <jmore () starmind org>]

I had sent this to Robin privately, but since discussion is happening here,
here's the link to the first of the three part series I did on this topic:
http://www.starmind.org/2012/01/12/security-certification-13-certifications-in-general/

There are a lot of people who ask me at events and on IRC how to get
started, so I wrote up this little HOWTO.  It's very cert-heavy, as the
most common question I get is "which certification do I need to break into
security"... so I have to start with the news that it just doesn't work
that way.

Since no one but people selling pharma and purses post blog comments these
days, if I'm going to improve the message in the future, I guess I have to
solicit comments on mailing lists like this.  :)

-Josh More



On Mon, Feb 20, 2012 at 9:50 AM, John Hoyt <john.h.hoyt () gmail com> wrote:

> I heartily agree that a big key is someone giving you a chance.
>
> As the saying goes, "It's not what you know, but who you know."
>
> It could be appended with, "but who you know *that likes you*".
>
> One thing that I believe never hurts is giving back.  It can open up doors
> that you might not have thought possible.
>
> John
>
> On Mon, Feb 20, 2012 at 10:27 AM, Robin Wood <robin () digininja org> wrote:
>
> > On 20 February 2012 15:05, JR Aquino <JR.Aquino () citrix com> wrote:
> > > For the longest time this is how I felt about getting into the security
> > field proper:
> > > http://www.youtube.com/watch?v=Af1OxkFOK18&feature=youtube_gdata_player
> > >
> > > Ultimately, I found the answer to be, "someone giving you a chance" all
> > the other background and experience didn't matter if you didn't already
> > come from an infosec position.
> >
> > That video is going in the talk, thank you for the link.
> >
> > I agree that getting someone to give you a chance is important and
> > hopefully these questions will help people see what they need to do to
> > get that chance. I tend to recommend people take part in the community
> > and build their names and reputations up as a first step, if you have
> > been actively releasing tools or writing blogs or even just asking and
> > answering questions for a while then when you come to ask for work
> > then people will know you and hopefully you'll have a much higher
> > chance of getting somewhere.
> >
> > That is two of us who believe that, lets see what other people feel.
> >
> > Robin
> >
> > > On Feb 20, 2012, at 6:42 AM, "xgermx" <xgermx () gmail com> wrote:
> > >
> > > > As a young whippersnapper trying to get into the field myself, thank
> > you.
> > > > On Mon, Feb 20, 2012 at 8:12 AM, Robin Wood <robin () digininja org>
> > wrote:
> > > > > I've just started a new project which is trying to get answers to the
> > > > > eternal question 'How do I get into information security?'. To do this
> > > > > I've put together a questionnaire and a brief outline of what I'm
> > > > > trying to achieve.
> > > > >
> > > > > I'm trying to solicit information from people at every level of the
> > > > > industry so please, have your say and help us create a resource that
> > > > > we can give to people who will continue to start emails with 'I'm
> > > > > interested in security, how do I get started?'
> >
> > > > > The project is here, please spread the word as widely as possible:
> > > > >
> > > > > http://www.digininja.org/projects/breaking_in_1.php
> > > > >
> > > > > Robin
> >
> > > > > _______________________________________________
> > > > > Pauldotcom mailing list
> > > > > Pauldotcom () mail pauldotcom com
> > > > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > > > Main Web Site: http://pauldotcom.com
> > > >
> > > >
> > > >
> > > >
> > > > _______________________________________________
> > > > gpwn-list mailing list
> > > > gpwn-list () lists sans org
> > > > https://lists.sans.org/mailman/listinfo/gpwn-list
> > >
> > >
> > >
> > >
> > >
> > > _______________________________________________
> > > gpwn-list mailing list
> > > gpwn-list () lists sans org
> > > https://lists.sans.org/mailman/listinfo/gpwn-list
> >
> >
> >
> >
> > _______________________________________________
> > gpwn-list mailing list
> > gpwn-list () lists sans org
> > https://lists.sans.org/mailman/listinfo/gpwn-list
>
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom () mail pauldotcom com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com