News for hackers. Stuff that matters.
Re:An insurance company’s API exposed customers’ car locatio... by pwg on Thursday May 11, 2017 @07:03AM (#14315160)
Actually, the parent is correct.

If the company providing the service were financially liable for these blunders, they would be careful to select contractors that are capable of meeting the security needs.

As it is now, there is no financial incentive to select the "security aware" contractor, and the "non-aware" one is so much cheaper...

Re:An insurance company’s API exposed customers’ car locatio... by toyg on Thursday May 11, 2017 @08:02AM (#14315376)
Or rather they would hire more pentesters to make sure the sw they get is robust. On paper everyone can write "secure" apps...