Penetration Testing mailing list archives

Re: Ethical Hacking Training


From: Jimi Thompson <jimit () myrealbox com>
Date: Sun, 18 Jan 2004 22:28:02 -0600

<SNIP>

Why not spend the time in researching how to correct security exploits
in enforcing secure coding standards and forcing vendors to clean up
their act and making their products work more efficiently and securely.
</SNIP>

Precisely how do you think that the aforementioned "security exploits" are discovered? My experience has been that unless you know how to hack and how to look at your network from the outside like one of the bad guys, that you aren't going to have much of an idea of what is vulnerable, what is poorly coded, and what does not work efficiently and securely.
2 cents,

Jimi

---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: