being both a member of the IT industry and a novice at network security, i can see both sides of the issue here.

i realize that experience counts for alot. Kevin definately has eperience in this area. this has been both admitted by him personally, and proven in a court of law. This is both a pro and a con when looking to hire a 'security expert'. the pro being that you know that an individual such as Kevin is fully capable of doing what he/she says he can do. the con being that possibly, he/she could do more, and not tell you about it. i agree that

i think what it really comes down to is moral/ethical structure. regardless of moral stance, you can still have an amazing amount of skill. its how those skills are put to use is really what is at issue. Kevin has chosen to put his criminal life behind him, truely a step in the right direction. He has taken the skills he developed in his criminal activities and is now using them to assist others in making sure others do not have used similar skillsets against them. if big business is afraid of hiring such persons, possibly they should consider looking at both sides of the story and build teams, drawing from both sides of the IT fence. having the safe producer and the safe cracker collaberate will build you a better safe.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/3982/19438#19438