I have both done pentests and received pentest reports. My observation is that the perceived severity often varies between the tester and the customer.
this post was submitted on 05 Sep 2024
66 points (97.1% liked)
Cybersecurity - Memes
1967 readers
2 users here now
Only the hottest memes in Cybersecurity
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Even the potential threat wank they add to low severity stuff is ridiculous.
Finding: device responding to ping requests.
Severity: Low.
Threat: Using timing attacks and response analysis an attacker could derived the devices operating system.
The hacker might shame you for using Windows Server on a public forum!
/s