Hacker News new | ask | show | jobs
by rprospero 4792 days ago
This takes me back to my brief stint with consulting. I knew someone who had a VBScript web application that kept crashing. I'd never done a lick of VBScript, but I had cut my teeth on QBasic, so I figured that I could get up to speed on the language in a week and probably get the bug fixed in another two. I was straight out of school and only wanted $20 an hour, so we said $2500.

With all of that out of the way, I finally got a look at the source code. Fifteen minutes later, the bug was fixed (it was just a missing quote in an SQL call).

Of course, while they could justify hiring a consultant for $20 an hour for a three week job, management wasn't happy with the idea of paying a fresh college grad $10k an hour to fix a one character bug. Thus, I wound up writing another app that they had wanted, also in VBScript.

If there's a Hell, I'm going there for the SQL injection vulnerabilities in that program.