Well, since I'm white as snow when it concerns hacking), I guess I can answer Shrek's question.
I've been a software engineer for 5 years, and had nothing to do with computer security. It was, more or less a hobby of mine at that time. In those 5 years, I've gotten to know really well C++/C, some Java and some tinkering with some script languages. However, the hobby took the overhand (and I got bored with programming and the company I did it for).
Now I work as a system administrator and I'm one of the fortunate who's boss is aware of the dangers on the net. So at work we have a separate LAN with several servers/services/clients/platforms to do some wargaming during lunch break or during periods when it's not too busy. That's where I learn a lot of stuff in a safe environment.
I have no ambitions breaking in in other peoples computers, but I have ambitions of keeping other people out of ours.
Cheers!
