OK i might be way of, or this could be great.
Hello, I have a suggestion, i see allot of companies that hire people to check for security on their systems or websites and servers. Why not let the HACKTHIS community do this, administrated via this site, a company can log in , and pay the site, and the members all try to exploit it, first one to post results get a percentage of the earnings for that particular job, i think the site can get more traffic , and the whole idea just seems fun. Also the idea of a ton of hackers looking for exploits is much more assuring than only one guy who would probably take weeks. Now i wait for people to come laugh at my idea lol…
11 years ago
0
I think its an awesome idea ;)!
but there are several things you have to keep in mind..
the percentage thing would be almost impossible, I believe all money should go straight to the admins to develop this site even more, I’m here for fun and learning not profit.
You should see that this would require the owners to get there terms of the site totally rewritten and it would require a lot of work and therefore time.
this is an awesome idea but I don’t believe it can become anything else than an idea, all hackers on this site who test out the costumers site would have to accept some kind of deal and therefore stand responsible if anything goes wrong or else hackthis.co.uk should take all responsible making this site come in danger if something went wrong.
I believe this is to dangerous for HackThis but we could put up commercials saying we do it for free and that a donation is highly appreciated, thereby the “costumer” would take all responsibility and we could have fun, but as soon as money is involved a lot of stuff comes in to play… unfortunately :/
I hope I’m not to hard to understand hehe my english could be better!
Peace - Th3FjoNG
- Nice post!
Actually your English is way better than mine xD , also i see what you are saying, but i didn’t think it will take off anyway haha. But i like ideas….
11 years ago
0
without ideas we would not be on this site ;) !
It is a great idea, but the things i could think of is listed below:
1- Without source code all our tests will mean nothing and we may not always be presented with source code.
2- I do not think anyone who is welling to pay to check security will allow anyone who is not certified to do it (Us as members)
3- If we bail out the admins will be screwed if already started multiple scans at the same time.
just saying, not killing the dream
I Hate Signatures.
im not saying this to kill the dream, maybe we could find some ways around stuff.
Like for point 3, maybe extra points for each bug reported could work or at least increase the commitment.
For 2, maybe a new group can be created where the members who want to work with this issue and have the skills needed are to be added with a page listing them as security audits or what ever that would also list sites worked on and bugs found would help boost trust from money payers, that would lead to step 1 to not happen or for 1 the admins must have the code for the checkups to start.
a copy of the database structure must be present too, where we could all run the site in our local hosts instead of just exploiting the hell out of the real site.
I Hate Signatures.
I love the idea but for the reasons mentioned above I can’t really see it becoming a reality. There are a number of ires that offer something similar, like https://bugcrowd.com
I Hate Signatures.
JAYSSJ11- “I’d rather be hated for who I am, than loved for who I am not.”