Re: [Full-disclosure] Fwd: Rate Stratfor's Incident Response

[doc mombasa <doc.mombasa@xxxxxxxxx>]

not my company anymore :) i walked out laughing a long time ago
part of my position was to pentest the different apps
i did and reported flaws but like i said there is no money here and now in
fixing flaws
so resources are allocated for new development instead

hiring a kiddie wouldnt help
youre missing the point
in any profit driven company its ORDER BY $$$
which means your kiddie would be coding crappy wepapps because of random
manager ideas
and usually introducing those very same flaws they like to exploit so much
just going in GUNG HO and fixing flaws outside of release cycles and so on
is also a bad idea for big companies as chaos would ensue

Den 12. jan. 2012 10.49 skrev Ferenc Kovacs <tyra3l@xxxxxxxxx>:

>
>>  Well that's what you get when you let profit margins dictate security
>> policy. You guys act pretty tough when you argue with each other online but
>> you can't stand up to some corporate idiots? Sounds like this industry
>> could benefit from these kids even more since they are driving home the
>> points you all are supposed to be warning them about.
>>
>
> Maybe you should try out at your company to hire a kiddie, and tell us how
> it turned out.
> Usually the ones shittalking here are those without a decent job imo...
>
> --
> Ferenc Kovács
> @Tyr43l - http://tyrael.hu
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/