5 ms·
Drop Table Companies Ltd
- deleted 8y ago[deleted]
- ddtaylor 8y agoSomeone also has a "DROP TABLE" license plate, apparently it once worked against a scanner too. https://hackaday.com/2014/04/04/sql-injection-fools-speed-traps-and-clears-your-record/ https://hackaday.com/2014/04/04/sql-injection-fools-speed-tr...
- w4tson 8y agoThe “,0,0” makes me think the person had inside knowledge
- lallysingh 8y agoOr they started adding parameters until some test procedure started working.
- timvdalen 8y agoLooks like it didn't work!
- notahacker 8y agoThe registrant himself: https://pizzey.me/blog/no-i-didnt-try-to-break-companies-house/ https://pizzey.me/blog/no-i-didnt-try-to-break-companies-hou...
- Moodles 8y agoNice of the author to be careful with the joke. I seriously hope company name x'); DROP TABLE 'Companies';-- wouldn't work either though
- Toine 8y agoIs there any example of SQL injections that worked IRL ? That's so funny.
- s3m4j 8y agoWhat do you mean by "IRL" ? SQL injections work every day, I think it's still the number one in the OWASP top 10.
- rocqua 8y agoMy wifi name is a drop_table NETWORKS injection. Never heard of it affecting anything though.
- pizzeys 8y agoTry making it an XSS payload - that one often works ;)
- roywiggins 8y agoThere's the stories of people named Null that make various systems crash or reject them, probably because they coerce to strings before checking for a "null" value.
- littlestymaar 8y agoI had a classmate named «Faux» (which means “false” in French) and it caused many bugs with Excels spreadsheets in our school.
- Noumenon72 8y agoJust having those Unicode characters in his name is bad enough!
- cpeterso 8y agoThe Twitter account "Ominous Null" shares real-life examples of systems mishandling null values: https://twitter.com/ominous_null/ https://twitter.com/ominous_null/
- blklivesmatter 8y agoThis should be indexed in google, facebook and twitter too
- jpfr 8y agoObligatory xkcd: https://xkcd.com/327/ https://xkcd.com/327/
- nsgf 8y agoLITTLE BOBBY TABLES you say? https://beta.companieshouse.gov.uk/company/11244754 https://beta.companieshouse.gov.uk/company/11244754
- hectormalot 8y agoIs this even real? I can only imagine the look at the chambers of commerce when somebody registered this. Also, this looks a typical system that would be vulnerable to this. At least where I live the details are always entered by a clerk, the systems are old and were never meant to be used directly by outside parties.
- pizzeys 8y agoIt was online so no 'looks' but I did end up having a very odd phone call at one point.
- chatmasta 8y agoIn all seriousness, doesn't this cause problems for you when registering for bank accounts, or trying to do any business activity with your company name? I think the whole thing is hilarious, I just can't believe it seems like you're actually using the company!
- pizzeys 8y agoHaha! Yes, that reaction happens a lot - a friend tried to discourage me from doing it actually for that reason, but I told him I'd just rename it if it became burdensome. So far it has only been a little bit burdensome. Bank account was actually incredibly easy, that is the one I expected to be difficult, too. I had no problems at all, I made an account with the usual process. Should note I'm using one of those new-fangled 'challenger banks' so they're probably quite tech savvy/their systems aren't 50 years old, that probably helped. The worst one has been the domain name, oddly. I wanted to get the .ltd.uk domain name (only available to registered companies in the UK) to basically complete/highlight the joke. But, I have been waiting for over a year or something now for it to actually be registered, it keeps being rejected by the registrar (there is a weird validation process to make sure you're a real company, etc). I could have sped it up by trying with a better registrar who are more aggressive at getting things done, probably, I had a few offers from smaller registrars - but I just went for the .co.uk in the end instead.
- 8y ago
- deleted 8y ago[deleted]
- dang 8y agoDiscussed in 2016: https://news.ycombinator.com/item?id=13280494 https://news.ycombinator.com/item?id=13280494
- hoppelhase 8y agoI always keep multiple bobby table contacts in multiple variations in my address book in case it gets leaked somehow.
- Dowwie 8y agoBobby Tables. Founder, CEO.