On avoiding band-aid security after penetration tests | Dark Hacker News