Posted by Rory Browne on 05/27/05 23:30

On 5/27/05, Manuel Lemos <mlemos@acm.org> wrote:
> Hello,
>
> on 05/27/2005 02:30 PM Ryan A said the following:
> >>You may want to try Security Space services. They perform many types of
> >>security checks remotely including penetration tests that may reveal
> >>serious vulnerabilities in your servers. Such vulnerabilities include
> >>holes, in your server OS version, Web and e-mail servers and even in the
> >>PHP version that you may have installed.
> >>
> >>You can try their no risk test in this page that is free and in a few
> >>minutes after the test is request you get a full report by e-mail.
> >>
> >>http://www.securityspace.com/smysecure/norisk_index.html?refid=1057382149
> >
> > Umm, you forgot to mention that you are "connected" to that site and you get
> > a commision
> > for sending them clients, if they sign up.
> >
> > Nothing wrong with getting an affiliate buck mind you, I have a few
> > affiliate accounts around too,
> > but I (and others on the list i have noticed, Jay B for one) mention that we
> > are connected to / own
> > the websites we are sending the person to.
>
> I did not forget to mention anything. Andy asked for a free penetration
> test and that is exactly what he gets going to the page mentioned above.
We generally like to know however if there is potential bias in links
we are being given.

It gives us a better idea how to treat the advice you are giving. I'm
sure the site is on the level, but when you don't mention that you
potentially get paid for putting that link there(through possible
referals), and we find out it makes us suspicious as to why you failed
to mention it. OTOH, I think a good few of us here, would like to
support each other by choosing services that each other get paid for,
provided they're up front with us.

Based on other posts here, I don't think you meant to deceive. I'm not
attacking, or giving out to you. I'm just saying this FYI.

>
> I have requested the free test several times and it was very useful
> because it brought my attention to aspects that I was not considering,
> some related to PHP in specific and other related to Internet in general.
>
> In all cases it is upto Andy to decide. FYI, if he takes the free
> penetration test as he asks, I still do not gain anything. If I ever
> gain anything with the referral, he would not be paying more for
> whatever services he would order.
>
> So, I do not see your point in bugging me for this. If you feel that I
> am not helping Andy, I would appreciate that you tell me that directly!
I wouldn't consider his post to be bugging you(unless he repeats it,
or has already posted a similar message before). Personally however I
appreciate being made aware of the issue.

>
> --
>
> Regards,
> Manuel Lemos
>
> PHP Classes - Free ready to use OOP components written in PHP
> http://www.phpclasses.org/
>
> PHP Reviews - Reviews of PHP books and other products
> http://www.phpclasses.org/reviews/
>
> Metastorage - Data object relational mapping layer generator
> http://www.meta-language.net/metastorage.html
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>

[Back to original message]