How I Hacked a Bank and Made 40 Bucks

#1

Post by lovelyLaney » Thu, Jul 28, 2011, 12:28 PM UTC

How I Hacked a Bank and Made 40 Bucks
golemtechnologies.com

Re: How I Hacked a Bank and Made 40 Bucks

#2

Post by soci_rich » Thu, Jul 28, 2011, 12:56 PM UTC

wasn't there a wall street journal article talking about how poor small business security was recently? How does this tie in?

Re: How I Hacked a Bank and Made 40 Bucks

#3

Post by dfxm12 » Thu, Jul 28, 2011, 1:20 PM UTC

Until these businesses (small and large) become responsible, either legally or financially, for the security of their websites, we'll see this continue to happen.

They simply don't care about the security of their customers because they have no incentive to.

I get that security is hard, but in this specific case, they knew about a hole and left it open for two months. That's negligence.

Re: How I Hacked a Bank and Made 40 Bucks

#4

Post by kaib » Thu, Jul 28, 2011, 1:20 PM UTC

So I tried to order a scan, given the low price of $7 only to realize the author of this service does not accept customers outside the U.S. and Canada.

Re: How I Hacked a Bank and Made 40 Bucks

#5

Post by pbhjpbhj » Thu, Jul 28, 2011, 2:11 PM UTC

I'm guessing a bank of such size won't believe that a $7 scan can tell them anything. If he charged $10k they would probably think that it was worth acting on too ...

Re: How I Hacked a Bank and Made 40 Bucks

#6

Post by tnorthcutt » Thu, Jul 28, 2011, 2:21 PM UTC

The post title doesn't make sense to me. Wouldn't something like "My service works, and now I charge even less" be more accurate?

Re: How I Hacked a Bank and Made 40 Bucks

#7

Post by pavel_lishin » Thu, Jul 28, 2011, 2:29 PM UTC

Seems to be down; anyone have a mirror?

Re: How I Hacked a Bank and Made 40 Bucks

#8

Post by aw3c2 » Thu, Jul 28, 2011, 2:48 PM UTC

pavel_lishin wrote: post #7

Seems to be down; anyone have a mirror?

copy the URL, go to Google, type "cache:" and hit Ctrl+v -> http://webcache.googleusercontent.com/search?hl=en&q=cac...

Re: How I Hacked a Bank and Made 40 Bucks

#9

Post by pavel_lishin » Thu, Jul 28, 2011, 3:12 PM UTC

> I have since lowered my prices (I love my customers, and want them to be secure).

So why not charge $0?

If you love your customers, crank the price up - that'll encourage them to actually listen to the results you give them.

Re: How I Hacked a Bank and Made 40 Bucks

#10

Post by spydum » Thu, Jul 28, 2011, 4:00 PM UTC

Summary: Security tester is paid to scan a bank, finds a vulnerable asset, reports back to the customer. Customer tells him he doesn't charge enough.

Here's my take: if he is charging $7, $10, $40, whatever, he's running automated scans. If the customer is suggesting they'd be willing to pay $10k, they are most likely under the impression this is a real, full-fledged pen-test. That is a massively dangerous assumption. A real pen-test is not just some process you kick off and walk away. It involves real investigation, testing, and analysis. Charging $7, $40, would bankrupt a tester.