News for hackers. Stuff that matters.

A comment on Ask HN: How unethical is it to develop insecure applications?. Parent comment

Re:Ask HN: How unethical is it to develop insecure applicati... by awebdev on Tuesday July 31, 2012 @06:02AM (#4316472)
I wish it were that simple. Insecure code is often inherited, not created ourselves. If the client has a limited budget and only wants to add X, how do you propose upselling them on security for their whole infrastructure?
[ Parent | on HN ]
Re:Ask HN: How unethical is it to develop insecure applicati... by debacle on Tuesday July 31, 2012 @08:25AM (#4316841)
I've worked on a lot of these projects. The best you can do is a gratis quick audit (I found SQL injections in these files, XSS in these files, and you really need to stop storing passwords in plaintext). I'd consider it gratis because being a consultant is one part programmer and ten parts professionalism.
[ Parent | on HN ]