News for hackers. Stuff that matters.

A comment on Stealing checks worth millions and pwning a bank. Parent comment

Re:Stealing checks worth millions and pwning a bank by arez on Tuesday May 17, 2022 @02:00AM (#31406529)
if you think that you just need QA and then you don't need pentesting anymore you have no idea what pentesting is.

QA doesn't find XSS, SQL injection, CSRF, IDOR

[ Parent | on HN ]
Re:Stealing checks worth millions and pwning a bank by blueflow on Tuesday May 17, 2022 @10:00AM (#31410775)
If its not QA, who else is auditing and reviewing your code?
[ Parent | on HN ]