3 ms·
"All the really bad security vulnerabilities were obvious." I used to work for a company that did a lot of acquisitions and I often involved in working with te
by arethuza 4y ago
"All the really bad security vulnerabilities were obvious."
I used to work for a company that did a lot of acquisitions and I often involved in working with teams at newly acquired companies - although it wasn't my main focus I did used to ask some simple security questions and it was remarkable what these uncovered. I literally had people run from the meeting to fix services after I had asked a simple question....
- spuz 4y agoCan you give some examples of some simple questions you would ask?
- arethuza 4y agoBy the nature of that particular domain a lot of systems delivered important documents (often containing data of rather extreme commercial sensitivity) to customer organisations. A standard question I always asked was "given a URL that links to a document how do you authorise access" i.e. what happens if someone who is logged in to the site in question gets a link to a document and passes it to a friend via instant messaging.
- davedx 4y agoHa recognisable. A very annoying problem to solve with web tech too - there’s no perfect solution to this problem (that I know of).