3 ms·
The article doesn't mention the 30% figure anywhere (except the title) [edit: I was wrong], which makes me wonder where it came from. Is it the hacker's experie
by paulgb 17y ago
The article doesn't mention the 30% figure anywhere (except the title) [edit: I was wrong], which makes me wonder where it came from. Is it the hacker's experience, or is he quoting someone else? If it's the former, issues of small sample size and selection bias come to mind.
- samdk 17y agoFrom the article: Tom says that one out of every three sites he's gained access to store user data in plain text databases.
- paulgb 17y agoOh, I must have missed that bit. Thanks.
- simonw 17y agoIt must be talking about this bit: "Tom says that one out of every three sites he's gained access to store user data in plain text databases. " Of course that doesn't mean a third of all sites - just a third of sites with lousy enough security that this chap could break in to them (presumably more SQL injections).