Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Not pentesters (Score 1) 58

I've been a pen tester, and what this guy is doing is not pen testing - it's vetting out false-positives a tool is telling him. As good as tools are, they'll never reveal vulnerabilities that may lead to the overall compromise of an environment. Things like business process flaws (like being able to manually modify prices or submit negative values during balance transfers), blind SQL injection (tools are worthless for those), parameter tampering (like changing an ID showing stuff that isn't yours) and parameter addition. You need an actual person who can look at something and think it's Not Quite Right.... something a tool just can't do.

Comment Re:Lets get something straight now (Score 1) 698

Biden did a good job reminding everyone that the mess we are in now didn't exactly happen by accident. As he noted it happened precisely because guy's like Ryan voted to put two major wars,

Biden supported the war in Afghanistan ("Whatever it takes, we should do it"), and voted in favor of the "Authorization for Use of Military Force Against Iraq".

Weak minds seem to also have weak memories

Couldn't have said it better myself

Slashdot Top Deals

Hackers are just a migratory lifeform with a tropism for computers.

Working...