matthewp comments on Information security: Become a hacker, not a consultant