Why should the word of a SRE at a small company be the gospel at this?

When I was working at Cisco pretty much all InfoSec people I know had a technical degree, from CS to EE to sometimes Mathematics.

I'm sure there are some outliers, but saying "no infosec people have degree in CS" is just plain ridiculous.

> "no infosec people have degree in CS"

You stretched that tweet pretty far. It's clearly nothing more than an anecdotal counterexample. I'm not sure how your paraphrasing quote ended up becoming such a sweeping generalization.

OP knows it's an anecdote. They are questioning the value of an anecdote from someone in a small company when the anecdote is about claiming to know enough people belonging to a certain category.

But github is very popular in the tech community. You'd think she would have met some infosec people with relevant degrees if they were common.

I know a system architect at Facebook with four music degrees...

Worked with several highly competent people in tech and infosec with music degrees, liberal arts degrees, no degree...

But I'm sure you also know system architect at Facebook with actual CS degrees.

I'm not saying music degree people can't be good engineers, but saying "no infosec people have CS degree" is plain absurd.

It really depends on your social circle and what area of infosec you're in. I've socially been in the 'hacker community' for most of my life and virtually nobody that I associate with from there has an actual CS degree.

A few folks got Physics degrees, but the vast majority of people I know left school to work and have not finished. Myself included.

The other very common backgrounds that I encounter is people who served in the military and people who backdoored their way into it from being sysadmins.

Good thing Alice doesn't say that, then. The headline strongly implies that having a music degree means that you can't be a good engineer.

Totally ignoring the fact that she was magna cum laude for her BA and summa cum laude for her MFA. And 15 years of experience working in tech.

She could have her degrees for computer music for all we know, which at the time she got them probably would have required some serious programming chops.

Yeah, it is absurd. Maybe that's why the tweet doesn't say that. (^:

they aren't saying "no infosec people have degree in CS", they are saying they don't know any. I don't know that I do either. I know very few people with CS degrees.

obviously Equifax has shit security they had multiple webpage panels exposed on the public internet (ouch so stupid) and with default credentials of admin/admin and you are arguing that the CISO is competent? She was obviously massively incompetent.

I work in infosec and I dropped out of a biology program.