News for hackers. Stuff that matters.

A comment on Security Update. Parent comment

Re:Security Update by abraae on Thursday May 16, 2019 @10:10PM (#19935578)
This is a great idea and someone should do it.

Specialize in storing personal data (name, address etc.)

Provide APIs that only allow gentle exfiltration of data. e.g. < 10K queries per minute/hour/day whatever.

Have alternate paths (e.g. manual procedures) when greater volumes are required (e.g. for disaster recovery testing).

Then get it audited to death by some serious security firms.

[ Parent | on HN ]
Re:Security Update by toomuchtodo on Thursday May 16, 2019 @10:20PM (#19935631)
Would this be something companies would pay for?
[ Parent | on HN ]
Re:Security Update by abraae on Thursday May 16, 2019 @10:37PM (#19935735)
A FAANG wouldn't, but a corporate building e.g. a second-tier system holding customer data might.
[ Parent | on HN ]
Re:Security Update by mehrdadn on Friday May 17, 2019 @12:17AM (#19936223)
Off-topic, but why is there no M in FAANG?
[ Parent | on HN ]
Re:Security Update by nlawalker on Friday May 17, 2019 @01:45AM (#19936643)
Rejected due to poor culture fit.
[ Parent | on HN ]
Re:Security Update by dodobirdlord on Friday May 17, 2019 @05:54AM (#19937951)
The term was originally coined in order to talk about stock price behavior.
[ Parent | on HN ]