4 ms·
> he said "we didn't do any pen testing" and when asked he said the opposite I conjecture they _did_ do something that could reasonably be called pen testing a
by l33t7332273 3y ago
> he said "we didn't do any pen testing" and when asked he said the opposite
I conjecture they _did_ do something that could reasonably be called pen testing and didn’t realize it.
GP even gives some examples: testing authentication code, checking security group configurations, and testing API calls all counts as rudimentary pen testing.
- mvdtnz 3y agoYou're now at the point of completely fabricating new facets of the original story in order to justify your lies.
- l33t7332273 3y agoI neither lied nor fabricated anything. What are you even talking about?
- mvdtnz 3y ago> I conjecture they _did_ do something that could reasonably be called pen testing and didn’t realize it. You've completely fabricated entire activities that the OP never even mentioned.
- l33t7332273 3y agoI clearly said it was a conjecture. Where’s my lie that I’m justifying?
- jabradoodle 3y agoBy their own admission they didn't think they had, and then they authored a document to the opposite affect. Also, sorry but checking your security group is setup correctly is not what any reasonable person would call a pen test. You may get away with that argument in a court (ianal), if you hadn't repeatedly stated you didn't believe it yourself.
- l33t7332273 3y agoMy point is that while they don’t believe they did a pen test, it’s very possible that their standard correctness testing of security related features was sufficient to meet a broad definition of the term.