News for hackers. Stuff that matters.

A comment on Netsparker - A False-Positive-Free Web Application Security Scanner.

Re:Netsparker - A False-Positive-Free Web Application Securi... by sebcat on Sunday August 25, 2013 @04:14AM (#6271330)
How can you have blind-/boolean based SQL injection without any false positives? I would at least expect some level of false positives for these methods as they generally imply causation from correlation.
[ Parent | on HN ]
Re:Netsparker - A False-Positive-Free Web Application Securi... by 616c on Sunday August 25, 2013 @04:16AM (#6271337)
How can you have any kind of system without false positives? Even medical tests have false positives, and there is a lot more review than this stuff.

But, copy writing is art and science. Keep the fluff away from HN skeptics, and you should be fine. :-)

[ Parent | on HN ]
Re:Netsparker - A False-Positive-Free Web Application Securi... by jamesaguilar on Sunday August 25, 2013 @04:20AM (#6271343)
Well, if you don't have any positives . . .
[ Parent | on HN ]
Re:Netsparker - A False-Positive-Free Web Application Securi... by ZirconCode on Sunday August 25, 2013 @04:21AM (#6271351)
Yes, the word Free is also highlighted in bold on the homepage, while False-Positive isn't. I assumed it was a free service for a good 5 seconds. If that was intentional or not, I can't tell.
[ Parent | on HN ]