The inverse is true in a lot of technology companies sadly. I once worked with a "network security expert" who got the job after 2 years as a front end web dev and zero real training in network security. He knew what SSL was so got promoted...
I was a Java Web Gui developer, typical stuff, so the architect of the project asked me to implement better security by reversing SHA512.
Specifically SHA512 he said, dont use SHA1 or SHA256 thats not good enough. And he explained several times how the security solution work, it would be based on reversing a hash function. As I shrugged it off, people say weird things sometimes, and offered a real solution he kept pushing for his solution. Weird but anyway maybe he just means what I mean but is using different words, so I implement a real solution, and then days later he questions my judgement and the solution because I didnt use his. Thats when I said "you cant reverse a hash function, in fact thats the point of it" and then point to the diagram he made see there, thats not mathematically possible. His title was Security Architect.
