Re: [Full-disclosure] Help put a stop to incompetent computerforensics

["Greg" <full-disclosure@xxxxxxxxxxxxxxxxx>]

----- Original Message ----- 
From: <trains@xxxxxxxxxxxxxx>
To: <full-disclosure@xxxxxxxxxxxxxxxxx>
Sent: Wednesday, August 10, 2005 10:50 PM
Subject: Re: [Full-disclosure] Help put a stop to incompetent computerforensics


> Quoting Jason Coombs <jasonc@xxxxxxxxxxx>:
> 
>> Somehow we need to fix this broken system and insist that all 
>> computer forensics be performed with the help of a competent 
>> information security professional, at the very least.
>>
>> Any other suggestions?
> 
> Maybe we should start a certification program.  And we'll charge $5000 
> a year to be certified so only serious players will get certified.  And 
> we'll have roving "seminars" in all major cities taught only by our 
> certified instructors.  Yeah, that's it.  And we'll rig the test so 
> people have to take our useless classes to pass our useless tests.  
> Then we'll dump press releases on every ZD rag out there and maybe pay 
> a few CIOs and industry shills to comment on how, "hiring a 'certified 
> computer corpse analyst' is the only way to determine competency".
> 
> Yeah.  That'll fix it.  tc
> 

What bothers me the most is that a lot of what I know - and I don't claim to 
know as much as most people here - isn't available as a "text" anywhere. You 
are interested enough, you work it out for yourself.

So, yeah, I could charge someone $5000 to be taught by me that which I know. 
However, compared to some it isn't worth $5000 while to others it is priceless.

Pick your target. An incompetent investigator is one who doesn't care not a 
newbie. A newbie is potentially incompetent and potentially the best thing ever 
to happen to this trade.

Don't stamp out newbies in the rush to stamp out knowledgeable lazy sods.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/