Well I think there's a few other things to take into account about postings to the pen-test list. First, you get what you pay for. Chances are the company isn't shelling out that much and you probably get the experience to go along with the price. Second, unless they are naming the client, I don't see any issue with asking the question -publicly-.

I agree that there's a ton of people without a clue doing all kinds of tasks out there that they aren't qualified to do. Then again if everyone held out for perfectly qualified people the unemployment rate would skyrocket. :D

Just a few thoughts..

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/443/34500#34500