News for hackers. Stuff that matters.
Re:Safari tries to fill username by kstrauser on Friday May 28, 2021 @02:29PM (#27318894)
"Look, I'm going to be honest with you: your pentesters are morons. They're grossly incompetent and should be embarrassed. I can give you a list of qualified alternatives you might want to choose from, and not just to test the work I've done for you, but for all your other projects too. Seriously, their advice is just awful and you really need to switch."

This isn't the time to tread lightly, but to go scorched earth. This isn't an "oh, we disagree on the finer points!" debate between peers kind of situation, but a flat-out "these knuckleheads are putting you at risk and you need to know it". You want to get the point across that you're not messing around or leaving room for doubt.

Source: have had these conversations several times over the years. I normally pride myself on tact, but in my experience tact is the exact wrong approach here as it gives the client the impression that there's a wiggle room of doubt.

Re:Safari tries to fill username by bradknowles on Saturday May 29, 2021 @01:28AM (#27323255)
The key here is to make this a do-or-die conversation. Tell the customer the truth, and then tell them you’re not going to work for them any more if they keep the other morons on the payroll — you’re not going to risk your reputation and your business on being associated with that other company.

“I’m sorry if this means we can’t do business any more, but this situation has gotten so severe, that I just have to tell you the unvarnished truth, and ….”

Re:Safari tries to fill username by kstrauser on Saturday May 29, 2021 @12:47PM (#27326473)
Yep. This isn’t just complaining about someone saying something you don’t like. You mean business, literally.