Yeah, I see where you're coming from. I guess we have to hope CompTIA does their part of promoting it properly Seeing as how the [new] objectives are now 2 years old, I'm not sure how far it'll make it.

Unfortunately I'm seeing this far too often lately with developers.

A site (or several) get hit with an (often automated) SQL injection attack and the 'fix' is to roll the database back to a clean state. Then get confused when the same thing happens less than a week later (lather, rinse, repeat...). People seem intent on fixing the symptom rather than the cause where web-site infecction is involved.

I've also seen cases of otherwise secure coders cut&pasting code from another source without checking it cuts mustard from a security perspective

Thanks again for all the help with this guys, but i am having some trouble finding info about setting up a hack box/what kind of things i could do with one. 

I am slowly buying parts to rebuild my computer (getting stuff as 24 hour sales pop up, waiting for price drops, etc...) and i am thinking i will turn my current computer into a hack box.  Can someone link me to anything useful?

Any box can be a hackbox really.
As Linux is not really hungry on resources, it doesnt ask for to much, but I prefer to have a reasonable amount of memory for number crunching.

Alright guys, i have setup (through my college) a job shadow.  We have not hashed out the details, but it should be within the next month.  They are trying to find someone in the info sec field that is willing to allow me to shadow them for a day or three, but i might end up following around a network admin (admins often wear the security hat in a smaller business right?)  If i end up with someone not specificly in the security field, but is knowledgable about this topic what kind of questions should i be thinking about?  I guess a better way to ask this question would be, what do you wish you asked about before you got your job in the field?

Also, in trying to find someone suitable what should the advisors helping me with this (and me as well) be asking about the person involved?  If a info sec person is not someone i can find what would be the next best thing?