3 ms·
Was this really the result of a SQL injection attack? I can't find any details on how data was exfiltrated from the site. With all of the tools available today
by cmiles74 6y ago
Was this really the result of a SQL injection attack? I can't find any details on how data was exfiltrated from the site.
With all of the tools available today I would have thought this kind of attack would be pretty uncommon.
- jcims 6y agoI don't know anything about this situation but in general you're absolutely right. Unfortunately when you have thousands of people trying to become the next @donk_enby, 'pretty uncommon' becomes just a matter of time.
- tim333 6y agoApparently their CTO introduced an SQL vulnerability in Feb, then patched https://arstechnica.com/gadgets/2021/03/rookie-coding-mistake-prior-to-gab-hack-came-from-sites-cto/ https://arstechnica.com/gadgets/2021/03/rookie-coding-mistak... Easy to make mistakes I guess. Little Bobby Tables strikes again.