News for hackers. Stuff that matters.

A comment on Dozens of high-traffic websites vulnerable to ‘account pre-hijacking’, study. Parent comment

Re:Dozens of high-traffic websites vulnerable to ‘account pr... by quesomaster9000 on Monday May 30, 2022 @09:15PM (#31565238)
IT security is an insurance problem, and the insurers may stipulate you need a pentest, which makes it not their problem and not your problem - just keep paying those premiums and the liability gets passed to the end-user ;)

There is no class-action lawsuit, that's just business...

[ Parent | on HN ]
Re:Dozens of high-traffic websites vulnerable to ‘account pr... by Gigachad on Monday May 30, 2022 @10:15PM (#31565499)
It’s the same in any industry. Try telling the local council they should build a road overpass over a pedestrian crossing because it’s safer and a few people have been hurt there.

What you are saying is true, but it’s unlikely anything will be done because it’s expensive and not a huge risk.

[ Parent | on HN ]