News for hackers. Stuff that matters.

A comment on 4chan announces vulnerability disclosure program . Parent comment

Re:4chan announces vulnerability disclosure program by moot on Tuesday May 06, 2014 @02:45PM (#7706353)
> I think it would be a very good idea for moot to bite the bullet and pay for a moderately thorough security audit of 4chan's code.

Where/who would you suggest? I'm certainly open to the idea.

[ Parent | on HN ]
Re:4chan announces vulnerability disclosure program by sillysaurus3 on Tuesday May 06, 2014 @03:09PM (#7706468)
Matasano: http://www.matasano.com/

It's a well-respected security firm that's been around for a long time.

[ Parent | on HN ]
Re:4chan announces vulnerability disclosure program by TallGuyShort on Tuesday May 06, 2014 @02:59PM (#7706411)
I have a feeling you could post the code on /b/ and find out about some vulnerabilities very quickly.

edit: On a more serious note, I've done some work with Palamida and been quite impressed. They can be pricey though. I know you're not keen to accept monetary donations, but I wonder if getting a reputable company to do it for free would work. I'm sure there's plenty of goodwill toward you in the technical community.

[ Parent | on HN ]
Re:4chan announces vulnerability disclosure program by ctb_mg on Tuesday May 06, 2014 @02:58PM (#7706405)
I don't know myself. Perhaps others can speak of reputable resources?
[ Parent | on HN ]