3 ms·
If you had sql injection rights in the database, there would be no need to trade; you would just insert a few nice rows in the db for yourself, mark yourself 's
by vessenes 15y ago
If you had sql injection rights in the database, there would be no need to trade; you would just insert a few nice rows in the db for yourself, mark yourself 'super trusted' and then initiate a withdrawal. This wasn't a SQL injection attack in my opinion.
- marshray 15y agoHmm, but what if the attacker wasn't in it for the $currency? What if he were in it to destroy Mt. Gox, as they say, "for the lulz"? Making all their customers angry and causing a run on their escrow accounts might just do it more effectively than trying to withdraw whatever could be obtained through their online trading platform.
- barkingcat 15y agoI agree - I think this has the earmark of a competitor exchange - to crash and destroy Mt. Gox so they can take the business.