I'd say it closer to: "if he monkies no pun intended) with the alarm system, without authority--and possibly without the skills to know that the monkeying is improving and not worsening the risk

It sounds like anything short of placing a button saying "click here for all our clients credit card numbers" on the main page would be an improvement.

The true crackers, the one's that you never hear about because they do their dirty deeds quietly, without fuss and without leaving traces.

Exactly, so why would they sit idly by for weeks (or years from the sound of it) while the site's vulnerable? They wouldn't, and quite possibly, didn't. In any case, this is no excuse whatsoever for not securing a system.

I also fail to see how tilly's situation is in the slightest bit relevant to this. Maybe if Gerard was rewriting the system on company time and attempting to release the source code for it, without his employers permission, after signing a restrictive agreement, tilly's situation might be apply.

First, he has already tried to get authorisation to make the improvements...and was turned down! Hence his question.

Well, the obvious replies are "decide if you really want to work there" and "listen to your employer, don't go looking for trouble" but those are boring and I get tired of repeating them :). I also don't think avoiding trouble is the best career move, there is something to be said for initiative.

In reply to Re(6): The danger of hidden fields by cjf
in thread The danger of hidden fields by Gerard

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.