Hey! I spent the equivalent of 24 months measured in 60-hour work weeks doing penetration testing and vulnerability assessments on the systems of my employer's clients. I don't recall having broken the law in any way, shape or form as any and all testing was done with the client's WRITTEN authorization. I do recall that in order the job, I had to pass a stiff background check which my employer used as a selling point to potential clients. At one point, I even applied for a security clearance. I just can't imagine Uncle Sam giving out security clearances to crackers, reformed or not. I can't imagine Uncle Sam being willing to do business with security forms that are known to hire crackers. Crackers with security clearances? How do you want to spell "Congressional investigation"? And how do you spell "PR disaster" for your employer that involves making him look like a jackass on CNN?

I recall that the military formed years ago elite Tiger teams whose mandate is to test the security of its computer systems. I don't recall any of the members of the Tiger teams as having broken the law in ay way, shape or form to acquire their expertise.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/3982/19539#19539