News for hackers. Stuff that matters.
Re:Security 101 for SaaS startups by koolba on Sunday March 05, 2017 @03:04PM (#13798203)
> Open an email group and name it [email protected] and add a page on your website to report security incidents to this email

You know a company takes security seriously when they have a typo in the word "security".

Re:Security 101 for SaaS startups by sokoloff on Sunday March 05, 2017 @03:21PM (#13798333)
It's on github and you can submit a pull request in not much more time than it took to snark here. (I submitted one for some of the other grammar/spelling issues in the file. [sorry for using the online editor-that authored a poor diff])
Re:Security 101 for SaaS startups by anotherturn on Sunday March 05, 2017 @03:22PM (#13798345)
Typos happen all the time - I was going to suggest that it was a bit of an unfair comment. Then I opened up their website [0] and their strapline is "In fraud prevention Accuracy Matters"...

None the less it is a useful document for those not versed in the basics of opsec and there's likely more value in insightful comments on the content...

[0]:https://www.forter.com

Re:Security 101 for SaaS startups by itaifrenkel on Sunday March 05, 2017 @03:35PM (#13798433)
Mmm. I'm sure our marketing would like to know why it feels strange. Would you care to state it even if it feels obvious to you?
Re:Security 101 for SaaS startups by anotherturn on Sunday March 05, 2017 @03:54PM (#13798548)
accurate ˈakjʊrət/ adjective

1. (especially of information, measurements, or predictions) correct in all details; exact. "accurate information about the illness is essential" synonyms: correct, precise, exact, right, errorless, error-free,

A typo is the antithesis of this.

However, as I mentioned in my previous comment the content is of value and to find fault in the guise of typos is absurd.

Re:Security 101 for SaaS startups by itaifrenkel on Sunday March 05, 2017 @05:16PM (#13799114)
Ahhh - now I get it. Well our marketing staff are mostly native English speakers. I'm not :)
Re:Security 101 for SaaS startups by itaifrenkel on Sunday March 05, 2017 @03:20PM (#13798328)
Ha ha. That's my typo. I'll fix it. Thanks
Re:Security 101 for SaaS startups by koolba on Sunday March 05, 2017 @03:25PM (#13798370)
Funny thing is I've seen this same typo (security spelled with a missing "c") first hand when reporting a security incident. What made it particularly bad was that it was a mailto:// link that was also spelled wrong so clicking it would send the email to the wrong address with no bounce reply (I'm guessing they had a catch all inbox rather than bouncing bad addresses).

Might want to throw in there a suggestion to generate a [email protected] GPG key and instructions to use it if the submitter feels it warrants it. Also, the usual note of not losing the private half of the GPG key so you don't look like an ass when someone emails you an encrypted security incident that you cannot decrypt!

Re:Security 101 for SaaS startups by itaifrenkel on Sunday March 05, 2017 @03:33PM (#13798421)
Thanks. I will
Re:Security 101 for SaaS startups by itaifrenkel on Friday March 10, 2017 @11:39AM (#13839856)