HONORABLE MENTIONS

摘要

It may not have the star power of Facebook, Amazon or eBay, but Etsy, an online marketplace for vintage and handmade items, is one of the safest places on the web to visit and shop. Under Lackey's security tutelage, Etsy (the web's 166th most trafficked site, according to the Alexa Web Information Service, part of Amazon.com) requires that new engineers endure a several-week-long training "bootcamp" to understand its code base. Once they are ready to go, developers analyze applications and turn over new code at astonishingly frequent rates - a process that prevents new vulnerabilities from being discovered and exploited. Also this year, Etsy launched a rewards program for researchers who find bugs on the site, and improved shopper security by introducing two-factor authentication, login history and full-site SSL encryption.