I finished school and it wasn't until was a few months employed for a major north american cyber security player I realized how flawed companies can really be.
When best practice is implemented properly and the company is managed properly and everyone is treated with respect you can't go wrong, but sadly this is not the case in the industry, it is quite the opposite.
Not to mention mismanagement and negative biases which shouldn't exist from the beginning. I don't want to say too much but trust me when I say it can be a real let down for white hats trying to pursue their career.
For example just look at Hacking Team, such a disappointment, on more than 1 level.
tl;dr - I'm a hacker who stops hackers for a living and the industry is flawed.
This hasn't happened in any of my employers (won't name drop - for obvious reasons), although I have known people who are in companies where this is the case and I think the industry as a whole isn't terrible but there are definitely some bad apples.
(30-07-2015, 01:10 PM)skz0 Wrote: maybe you are in the wrong side kiddo :(
I've actually learned more on how to compromise companies than protect them. But I guess that can go both ways since you need to know how to compromise to protect.
Maybe you're right haha, with the right team we could easily get into just about any network.
BTW; for any of you scriptkiddies- social engineering can be a massive part of infiltration, you really have no idea... Like seriously.