Brian Krebs is conducting a series of interviews with computer experts on how they got into the field and what they'd advise others to do if they want to break in themselves. The first one, an interview with Thomas Ptacek, ran last month. The latest is from Bruce Schneier:
In general, though, I have three pieces of advice to anyone who wants to learn computer security:
* Study: Studying can take many forms. It can be classwork, either at universities or at training conferences like SANS and Offensive Security. (These are good self-starter resources.) It can be reading; there are a lot of excellent books out there — and blogs — that teach different aspects of computer security out there. Don’t limit yourself to computer science, either. You can learn a lot by studying other areas of security, and soft sciences like economics, psychology, and sociology.
* Do: Computer security is fundamentally a practitioner’s art, and that requires practice. This means using what you’ve learned to configure security systems, design new security systems, and — yes — break existing security systems. This is why many courses have strong hands-on components; you won’t learn much without it.
* Show: It doesn’t matter what you know or what you can do if you can’t demonstrate it to someone who might want to hire you. This doesn’t just mean sounding good in an interview. It means sounding good on mailing lists and in blog comments. You can show your expertise by making podcasts and writing your own blog. You can teach seminars at your local user group meetings. You can write papers for conferences, or books.
How to Break Into Security, Schneier Edition
The UK is one of the easiest places in the world to set up a shady company, which is why accused Mafia money-launderer Antonio “Tonino the Blond” Righi set up his shell company Magnolia Fundaction UK with Britain’s Companies House, giving an address in Soho.
Before being convicted of felony securities fraud, smirking cartoon villain pharma-douche-bro Martin Shkreli had to be tried in front of a jury and this presented a unique problem because everyone hates Martin Shkreli, and thus more than 100 jurors were dismissed from the pool during pre-trial questioning. Here are some of the statements that led […]
Stanford’s Center for Research on Education Outcomes released this study in 2015, comparing the outcomes for students enrolled in online charter schools with comparable students (controlled for grade level, gender, race/ethnicity, free lunch eligibility, English language status, special ed status and historical state achievement test scores) in brick-and-mortar classrooms.
The Pry.Me Bottle Opener holds tens of thousands of times its own weight, and you can pick one up now from the Boing Boing Store.This remarkable keychain is considerably smaller than any of your keys, but don’t let that fool you: it can easily open any bottle, and could even tow a trailer full of […]
Guaranteeing your privacy online goes way beyond checking the “Do Not Track” option in your browser’s settings. To ensure that your internet activity is totally hidden from Internet Service Providers, advertisers, and other prying eyes, take a look at Windscribe’s VPN protection. It usually costs $7.50 per month, but you can get a 3-year subscription […]
This project management bundle will help you get organized and learn how to lead a team to success. You can pay what you want for these five courses when you pick them up from the Boing Boing Store.To help you become an invaluable asset for your company, this bundle includes a curated collection of professional […]