5 ms·
Hacking Facebook’s Corporate Network for Fun and Profit
- cluda01 14y agoWhy don't more companies do this? It seems like a good way to outsource your penetration testing at bargain basement prices. edit: Well, I would say in concert with your own internal penetration test, not replace
- kayman 14y agoIt requires a new way of thinking. Crowd sourcing your security and giving an incentive for the person to report the security hole.
- GFKjunior 14y agoHere is German? site that does crowd-sourced pen-testing. I have no first hand experience but most testers seem to be from eastern europe. https://www.hatforce.com/ https://www.hatforce.com/
- darien 14y agoSounds like this guy had bad timing - http://www.pcworld.com/businesscenter/article/229396/uk_man_arrested_on_facebook_hacking_charges.html http://www.pcworld.com/businesscenter/article/229396/uk_man_...
- pavel_lishin 14y agoI wonder what the deadline is. How much time can pass between me finding a vulnerability and me reporting it before I'm labeled an evil black-hat, instead of a bug-reporting penetration tester?
- tectonic 14y agoThat's a pretty serious hole indeed. Good find! Is the title a reference to http://blog.andrewcantino.com/blog/2011/12/14/hacking-google-for-fun-and-profit http://blog.andrewcantino.com/blog/2011/12/14/hacking-google... or a coincidence?
- ssclafani 14y agoThanks. Both titles are references to the paper Smashing The Stack For Fun And Profit by Aleph One. http://insecure.org/stf/smashstack.html http://insecure.org/stf/smashstack.html