Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
@AlmondSauce Oh no, my manager is a nice lady. I think it's just that she's eager to improve the project quote and is not really knowledge about the nuances of security. Her argument was that since it's out on the internet, it would be subjected to attacks anyway.
-
@exceptionalGuy I'm not sure I quite buy that. She might be nice, but knowing that it's rather illegal to attack something that's not your own (and you haven't been given permission to attack) isn't really knowing the "nuances" of security, it's almost common sense, otherwise any kind of hacking would be legal "becuase it's on the internet and it's going to get hacked anyway."
-
@AlmondSauce I get what you mean but for someone who's not really specialising in such matters, it'd be a lot easier to be ignorant than you imagine. I'd have an issue if she pressed me to do it. It's an innocent mistakes otherwise. I'm quite patient with people anyway. xD
Related Rants
Did you say security?
10 points for next century option.
My team manager showed me a web application of a new client and asked me if I can find vulnerabilities in it to push for a better product contract. She showed me the system architecture and asked me if I could try finding something from their login page. I politely refused since we don't have written permission to conduct a security audit (it's also a ministry website). She was pretty disappointed and idk if I'm doing the right thing not helping the company (I'm an intern but still). I'm sure I can scan in stealth but I don't think it's ethical on a corporate level. Thoughts?
rant
security