News for hackers. Stuff that matters.

A comment on GitHub censored my research data. Parent comment

Re:GitHub censored my research data by sillysaurus3 on Saturday October 15, 2016 @03:26AM (#12713102)
A solution to this is to hire a pentester for your site. You can find them for ~$5k, with followup tests for new features being around $2k. A professional, world-class pentest runs around $50k, but a lot of smaller sites can't afford that.

You can't really hire someone with the expectation that they'll develop secure code. Finding flaws in code people thought was secure is a pentester's job, and it's a completely different skillset.

[ Parent | on HN ]
Re:GitHub censored my research data by lucaspiller on Saturday October 15, 2016 @03:35AM (#12713121)
I agree, but my point is the people who hired the developers probably don't even know what a pentester is.
[ Parent | on HN ]
Re:GitHub censored my research data by sillysaurus3 on Saturday October 15, 2016 @03:44AM (#12713139)
Yes. A lot of them also respond with threats when you try to contact them to tell them about vulnerabilities. It's not really up to the author to shoulder that kind of responsibility.

https://news.ycombinator.com/item?id=12309035 is informative. For what it's worth, it changed my mind on the matter.

[ Parent | on HN ]