Often, when I'm consulting with a client and a third-party service provider, I may have the need to bring up a security concern which should be considered, or eliminated, surrounding what the third-party service provider aims to implement. This can be met with a defense of "We have always done it this way and not had a problem yet." which drives me insane!
tag: #rant (2 posts)
Accused of Hacking
2025-01-06About 5 years years ago, during a security sweep of a new "app" a
client had started using, I discovered the hosting company's website
had a robots.txt giving the paths of many pages on their website containing
sensitive information.
The whole thing is starting to snowball, so this is my statement.