Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

>>This situation reads like an engineer who needs a bit of business/sales experience more than anything.

Your post reads like a salesperson hand-waving away actual situations of consequences in favour of a quick buck. There is literally no embellishment in this scenario, it's outright lying. He didn't say "well we tested security in some things but it wasn't up to a great stabdard", he said "we didn't do any pen testing" and when asked he said the opposite.

lol there's no ambiguity here. I love it when otherwise "street-wise" salespeople get challenged with very obvious scenarios they all of a sudden become postmodern philosophers.

"I mean, what does it even mean to COMMIT fraud? I mean, did I really "commit" to it if I did it once but gave it up after? Hmmm? Ever ask yourself these deep kinds of questions?"

Give me a break. Some sales people are so deep into a near-sociopathic lifestyle of "sales" that they are just pathological liars in the most literal sense. They don't even see themselves weaving deception.



> he said "we didn't do any pen testing" and when asked he said the opposite

I conjecture they _did_ do something that could reasonably be called pen testing and didn’t realize it.

GP even gives some examples: testing authentication code, checking security group configurations, and testing API calls all counts as rudimentary pen testing.


By their own admission they didn't think they had, and then they authored a document to the opposite affect.

Also, sorry but checking your security group is setup correctly is not what any reasonable person would call a pen test.

You may get away with that argument in a court (ianal), if you hadn't repeatedly stated you didn't believe it yourself.


My point is that while they don’t believe they did a pen test, it’s very possible that their standard correctness testing of security related features was sufficient to meet a broad definition of the term.


You're now at the point of completely fabricating new facets of the original story in order to justify your lies.


I neither lied nor fabricated anything.

What are you even talking about?


> I conjecture they _did_ do something that could reasonably be called pen testing and didn’t realize it.

You've completely fabricated entire activities that the OP never even mentioned.


I clearly said it was a conjecture.

Where’s my lie that I’m justifying?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: