Comments on LARES BLOG: Customer Wow Factor = 100, Customer Value Factor =...

Here here. So many of the so called "pen-tes...

2011-06-30T11:57:47.470-06:00

Here here. So many of the so called "pen-test" scopes end up having organizations hone their security on such a narrow attack surface, that when it comes to a real attack, it reminds of that scene in Indiana Jones where the guy whips all those swords around all fancy and then Indy just shoots him. Most pen-testing scopes is all about swordplay while attackers use guns.

+1

2011-06-29T15:18:11.798-06:00

Actually dehaul, yes. We walk from jobs all the ti...

2011-06-28T19:29:49.093-06:00

Actually dehaul, yes. We walk from jobs all the time where we can anticipate the lack of value for the customer. there are plenty of companies willing to compromise their morals and better judgement for the all mighty dollar. We take a stand against that. I am not saying everyone should, but we most certainly do.

What do you do then when faced with a job with suc...

2011-06-28T16:53:23.177-06:00

What do you do then when faced with a job with such restrictions? Tell them they are stupid and walk away?

Seems like there will always be a consultant who wants money so they will pull off the "movie plot" attack vectors to get into a company... and as long as someone will do it, they will get the job.

The market forces are seemingly driving the consultants to be stupid...