And yet, (correct me if I'm wrong), a good security person does not need to understand cryptography. He should have some basic understanding of how to apply it, but the knowledge of it's internals and the math behind it is pretty much useless.
Yeah from the outside looking in, to me the biggest requirement is one of mindset, thinking like an attacker, thinking of all the possibilities… in that sense very much like the qualities for a good QA person
true, crypto(graphy - wow, been so long since i've typed it that I've just realized crypto has now been bogarded for something else).
theory vs applied but I think its still true the mindset of a hacker is still very different. ie similar to the whole IT vs dev
or better yet - make the reddit app so good....people wouldn't want to use another one.