On avoiding band-aid security after penetration tests
medium.com