full-disclosure - Re: Fwd: Rate Stratfor's Incident Response

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 12 Jan 2012 10:53:07 +0100
From: doc mombasa <doc.mombasa@...il.com>
To: Ferenc Kovacs <tyra3l@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Fwd: Rate Stratfor's Incident Response

not my company anymore :) i walked out laughing a long time ago
part of my position was to pentest the different apps
i did and reported flaws but like i said there is no money here and now in
fixing flaws
so resources are allocated for new development instead

hiring a kiddie wouldnt help
youre missing the point
in any profit driven company its ORDER BY $$$
which means your kiddie would be coding crappy wepapps because of random
manager ideas
and usually introducing those very same flaws they like to exploit so much
just going in GUNG HO and fixing flaws outside of release cycles and so on
is also a bad idea for big companies as chaos would ensue

Den 12. jan. 2012 10.49 skrev Ferenc Kovacs <tyra3l@...il.com>:

>
>>  Well that's what you get when you let profit margins dictate security
>> policy. You guys act pretty tough when you argue with each other online but
>> you can't stand up to some corporate idiots? Sounds like this industry
>> could benefit from these kids even more since they are driving home the
>> points you all are supposed to be warning them about.
>>
>
> Maybe you should try out at your company to hire a kiddie, and tell us how
> it turned out.
> Usually the ones shittalking here are those without a decent job imo...
>
> --
> Ferenc Kovács
> @Tyr43l - http://tyrael.hu
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/