3 ms·
A solution to this is to hire a pentester for your site. You can find them for ~$5k, with followup tests for new features being around $2k. A professional, worl
by sillysaurus3 10y ago
A solution to this is to hire a pentester for your site. You can find them for ~$5k, with followup tests for new features being around $2k. A professional, world-class pentest runs around $50k, but a lot of smaller sites can't afford that.
You can't really hire someone with the expectation that they'll develop secure code. Finding flaws in code people thought was secure is a pentester's job, and it's a completely different skillset.
- lucaspiller 10y agoI agree, but my point is the people who hired the developers probably don't even know what a pentester is.
- sillysaurus3 10y agoYes. A lot of them also respond with threats when you try to contact them to tell them about vulnerabilities. It's not really up to the author to shoulder that kind of responsibility. https://news.ycombinator.com/item?id=12309035 https://news.ycombinator.com/item?id=12309035 is informative. For what it's worth, it changed my mind on the matter.