3 ms·
This is absolutely not how the Mt. Gox database works. I know because I have access to the source code of the site. All that source code you're looking at mean
by marshray 15y ago
This is absolutely not how the Mt. Gox database works. I know because I have access to the source code of the site.
All that source code you're looking at means nothing if the attacker gained arbitrary SQL execution on the database.
- vessenes 15y agoIf you had sql injection rights in the database, there would be no need to trade; you would just insert a few nice rows in the db for yourself, mark yourself 'super trusted' and then initiate a withdrawal. This wasn't a SQL injection attack in my opinion.
- marshray 15y agoHmm, but what if the attacker wasn't in it for the $currency? What if he were in it to destroy Mt. Gox, as they say, "for the lulz"? Making all their customers angry and causing a run on their escrow accounts might just do it more effectively than trying to withdraw whatever could be obtained through their online trading platform.
- barkingcat 15y agoI agree - I think this has the earmark of a competitor exchange - to crash and destroy Mt. Gox so they can take the business.