Tagged Questions
12
votes
2answers
408 views
What to do when you find a security hole in your company's site
I have found a major security hole in one of my company's public facing site. This is our first public facing site that was converted from an intranet site. I brought this issue up to my boss and they ...
12
votes
6answers
534 views
Discovered large security hole in someone elses website… What to do?
A chap I'm bidding to do some development for has a social network he wrote himself.
Not the next facebook by any stretch. But a few thousand local users.
I went to have a look at it to see what ...
27
votes
14answers
3k views
What to do if you find a vulnerability in a competitor's site?
While working on a project for my company, I needed to build functionality that allows users to import/export data to/from our competitor's site. While doing this, I discovered a very serious security ...
5
votes
4answers
137 views
How do I report software vulnerabilities found in an open source library that are widely used but have a dilapidated team structure?
For most open source project, there is a well-founded project team and corporate sponsorship, and a lot of active contributors. The procedure for filing bug reports are clearly documented.
However, ...
5
votes
2answers
186 views
Do you apply a code of conduct on accepting jobs, projects or requirements?
When writing software for yourself, your company or third parties, do you always consider certain principles, values, standards, or rules of behavior that guide the decisions, procedures and systems ...
