nulldev
> Certification in a field such as vulnerability research
OSCP is basically tool-based network pen testing with a bit of outdated websec and buffer overflows thrown into the mix. It's not "vulnerability research" in any meaningful sense of the word. They have some other certs (OSCE) that might purport to target that domain, but idk much about them.
> As for job prospects, generally certification won't get you into companies that are only looking for talent as opposed to a checklist of certifications
So apparently OSCP won't get you a job at Matasano - but they're not the only game in town, and a lot of other security shops with less name recognition and lower standards do in fact use the OSCP as a positive signal.
No, it won't be l33t but it will be a job that they can use to transition to those fancy schmancy companies whose founders are HN regulars.
https://en.wikipedia.org/wiki/Lighthouse_and_naval_vessel_ur...
Unless everyone on both ships was asleep, this statement doesn't have to be true. If anything, it seems eminently plausible the destroyer's crew was playing chicken with the freighter thinking they were playing against a human opponent, when in fact they were dealing with an automated system.