3 ms·
the example in the link (the image of the "hack") isn't sql injection - it's just reading a database table through the appropriate api. the more detailed info
by andrewcooke 15y ago
the example in the link (the image of the "hack") isn't sql injection - it's just reading a database table through the appropriate api.
the more detailed info at http://www.thehackernews.com/2011/05/lulzsec-leak-sonys-japanese-websites.html http://www.thehackernews.com/2011/05/lulzsec-leak-sonys-japa... again doesn't show any injection. all they are doing is reading the contents of various tables through a simple (REST-like) API/URL.
["IT security blog of the year" and they don't know what injection is? and what about all the "experts" in this thread? do any of you, so ready to pontificate, have proof this is a valid attack?]
- JoachimSchipper 15y agoIt seems to work as designed, but its design is pretty stupid - it's arguably still a hole. I'm with you on the "experts" though.
- jlind 15y agoSecurity hole or not, Sony clearly has a whole lot of negative momentum in regards to security. Sony are already estimating $171m loss for as a result of the PSN outage[1]. [1]http://www.joystiq.com/2011/05/23/psn-breach-and-restoration-to-cost-171m-sony-estimates/ http://www.joystiq.com/2011/05/23/psn-breach-and-restoration...