,
3 tweets,
1 min read
Read on Twitter
@arianevans I used to think that as well, but listening to him talk about "badness-ometers" gave me a different perspective, something like: "penetration testing is the worst form of security testing, except for all the others."
@arianevans Even industry vets like @dinodaizovi have recently talked about how there is so much quality variability between testers and pentest shops, as an example.
@arianevans @dinodaizovi I don't think GEM really thinks pentests should go the way of the dinosaur, so much as the customer of one should recognize that it might be money better spent focusing on design and code review. Anyway, that's the apologetics I'll offer on his behalf on a Friday.
