Re: [SC-L] any one a CSSLP is it worth it?

2010-04-14 Thread Wall, Kevin
Dana Epp wrote: > Not sure that would work either though. Dana, My comment was meant tongue-in-cheek. Guess I used the wrong emoticon. Figured that ';-)' would work 'cuz I never can remember the one for "tongue-in-cheek". I've seen several variations of the latter... :-? :-Q :-J

Re: [SC-L] any one a CSSLP is it worth it?

2010-04-14 Thread Dana Epp
Not sure that would work either though. Many secdev people are introverts. In their shell, they won't debate the validity of a position, including a wrong answer. Zone that into a response in the exam. It's one thing to say "there is no correct answer", but the way the questions are set at ISC2, i

Re: [SC-L] any one a CSSLP is it worth it?

2010-04-14 Thread Paco Hope
On 14 Apr 2010, at 16:24, Wall, Kevin wrote: > I just reread your Dark Reading post and I must say I agree with it > almost 100%. The only part where I disagree with it is where you wrote: > >The multiple choice test itself is one of the problems. I >have discussed the idea of usi

Re: [SC-L] any one a CSSLP is it worth it?

2010-04-14 Thread Wieneke, David A.
25 AM To: 'Gary McGraw'; Matt Parsons; Secure Code Mailing List Subject: Re: [SC-L] any one a CSSLP is it worth it? Gary McGraw wrote... > Way back on May 9, 2007 I wrote my thoughts about > certifications like these down. The article, called > "Certifiable" was

Re: [SC-L] any one a CSSLP is it worth it?

2010-04-14 Thread Wall, Kevin
Gary McGraw wrote... > Way back on May 9, 2007 I wrote my thoughts about > certifications like these down. The article, called > "Certifiable" was published by darkreading: > > http://www.darkreading.com/security/app-security/showArticle.jhtml?articleID=208803630 I just reread your Dark Reading

Re: [SC-L] any one a CSSLP is it worth it?

2010-04-14 Thread Gary McGraw
Hi Matt, Way back on May 9, 2007 I wrote my thoughts about certifications like these down. The article, called "Certifiable" was published by darkreading: http://www.darkreading.com/security/app-security/showArticle.jhtml?articleID=208803630 You can find all of my columns written over the last

Re: [SC-L] any one a CSSLP is it worth it?

2010-04-14 Thread Mike Lyman
On 4/12/2010 2:03 PM, Matt Parsons wrote: > > I am a CISSP with programming experience, static code analysis and web > penetration testing. I am thinking about taking the CSSLP. I just > bought the review book. Is it worth getting this certification? Is > it going to raise my rates and help

[SC-L] any one a CSSLP is it worth it?

2010-04-13 Thread Matt Parsons
I am a CISSP with programming experience, static code analysis and web penetration testing. I am thinking about taking the CSSLP. I just bought the review book. Is it worth getting this certification? Is it going to raise my rates and help me get more contracts? Is the GIAC better or shou