WebApp Sec: Re: PCI DSS Compliance

[Ademar Gonzalez <ademar.gonzalez () gmail com>]

Thanks to everybody that answered, i appreciate it.

My comments, first I do not apreciate people/companies gaining
security intelligence on my network, less facilitating it for them.
Whatever might  be there for a hacker to find/exploit is also there
for the company doing the scan.

Second, having your site certified adds nothing to the site security,
in my experience 100% of compromised sites i have deal with where due
to application level exploits.

I'm aware most of you disagree with me, but then my bussines is not to
sell this certifications :-)

Regards.

ademar