News for hackers. Stuff that matters.
Re:Ask HN: How do you continuously monitor web logs for hack... by riku_iki on Tuesday May 08, 2018 @03:19PM (#17023909)
> Depending on how big you are, hire people to break in on some regular basis.

Just curious, how this is covered from legal standpoint? Do you ask clients to sign some consent document to release you from liability from damage from hacking by automated tools?

Re:Ask HN: How do you continuously monitor web logs for hack... by dsl on Tuesday May 08, 2018 @04:52PM (#17024951)
For work I am doing, most of the "automated tools" are things I wrote myself and I know what they do. It is up to the engineers working on the engagement to exercise care and avoid causing disruptions to the target or doing things they can't reverse easily.

I like to remind people that having someone on retainer that breaks your stuff with an automated tool is better than having some random guy on the internet break your site with the same tool. Either way it is eventually going to happen, but at least I will immediately notice and contact the right folks to help get it fixed.