How I 'stole' $14 million from a bank: A security tester's tale

Re:How I 'stole' $14 million from a bank: A security tester'... by dlhavema on Wednesday May 15, 2013 @11:49AM (#5712769)

I talked to a guy a few years back that used to do this as his full time job, but the constant law-suits that ensued drove him to stop doing this kind of pen-testing altogether. most companies just hired them to check off a list and when the security firm actually found something the client would try to sue the pants off of them for "violating there systems" even they they had full knowledge, signed forms, etc... too much hassle for them...

i personally would love to do this kind of work, legally breaking into a system to see if it could happen would be very entertaining.

[ Parent | on HN ]

Re:How I 'stole' $14 million from a bank: A security tester'... by PwdRsch on Wednesday May 15, 2013 @12:24PM (#5713041)

I used to do this same thing and never heard about pen testing firms being sued by their client. Most likely he was spinning a yarn.

It is more likely that a security consulting firm will be sued if they report no issues and the bank is later compromised.

[ Parent | on HN ]