No, actually, you would hire a safe cracker to break into the safe, tell you how he did it, then give the details to the engineer to improve it.

All because a safe cracker has the knowledge of what tools to use to crack the safe, (probably by tinerking and not actually learning the engineering) doesn't mean he can build his own safe. If he could, he would be rich.

The same can be said about a hacker. All because a hacker has said knowlege of a particual protocol, maybe more than one, doesn't mean he has the ability to write his own secure version of that same protocol. And in essense, that is what a real security professional does. Someone who sets up an IDS box, or a firewall is not a security professional, they are network administrators. Get your shit straight.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/3982/19470#19470