Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Fwd: Rate Stratfor's Incident Response
From: doc mombasa <doc.mombasa () gmail com>
Date: Thu, 12 Jan 2012 10:53:07 +0100

not my company anymore :) i walked out laughing a long time ago
part of my position was to pentest the different apps
i did and reported flaws but like i said there is no money here and now in
fixing flaws
so resources are allocated for new development instead

hiring a kiddie wouldnt help
youre missing the point
in any profit driven company its ORDER BY $$$
which means your kiddie would be coding crappy wepapps because of random
manager ideas
and usually introducing those very same flaws they like to exploit so much
just going in GUNG HO and fixing flaws outside of release cycles and so on
is also a bad idea for big companies as chaos would ensue

Den 12. jan. 2012 10.49 skrev Ferenc Kovacs <tyra3l () gmail com>:

 Well that's what you get when you let profit margins dictate security
policy. You guys act pretty tough when you argue with each other online but
you can't stand up to some corporate idiots? Sounds like this industry
could benefit from these kids even more since they are driving home the
points you all are supposed to be warning them about.

Maybe you should try out at your company to hire a kiddie, and tell us how
it turned out.
Usually the ones shittalking here are those without a decent job imo...

Ferenc Kovács
@Tyr43l - http://tyrael.hu

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]