The penetration test that would have reliably generated the same outcome as this... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

tptacek on Dec 17, 2016 | parent | context | favorite | on: Shopify has paid over $300k in security exploit bo...

The penetration test that would have reliably generated the same outcome as this bug bounty program would have cost ~1/6th as much as the bounty did.

fjdlwlv on Dec 17, 2016 [–]

How many times do you need to repeat the pen test to catch new bugs in new releases?

tptacek on Dec 17, 2016 | [–]

The outcome of the project altered the design of Shopify Scripts to moot most of the bug classes people reported. So: not that often.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact