/biz/ - Business & Finance

>>15470588
>Why would they exist then?

They exist to make money, they don't run cert programs at a loss for the good of world internet security, after all.

>>15470561
>here is tptacek

He's not wrong but you have to remember he's smarter than 99% of HN and most definitely 100% of 4chan while most certainly being more rich and more connected than us, so he isn't dealing with the same HR and life bullshit that the rest of us have to deal with.

He and patio11 made specific points about pulling diamonds out of the rough with Starfighter ('the rough' meaning "C# devs doing boring work" IIRC), and the blunt truth is that we're not all diamonds just because we want to work in security. The same is true for anyone joining security and his posts in that thread sound *really* familiar to the Starfighters pitch.

In other comments he promotes work-sample interviews, but not every company does that. Are you personally going to optimize for tptacek's strategy, or the larger market? He doesn't tell you what to do if you fail his work sample stuff, after all. Chances are you'll want to go apply somewhere else. If you want to re-apply, how much time do you have to study and eventually succeed?

If you can get tptacek to mentor you when you don't understand something in the books they tell you to read, then fuck getting OSCP of course, but I suspect it's actually useful to some of us, even if he views it as silly, because we don't have mentors like tptacek at our disposal.

He even tells you point-blank that resumes don't matter for his companies, so if that's true, why not get OSCP if you have the time/money and want to get it? Having OSCP won't make a difference applying to his companies, but it will make a difference if you apply to other companies.