29 ms·
A good article on security and XSS, but the conclusion is a little disappointing. The headline makes it seem like the author knew why Billabong got hacked, so t
by benihana 14y ago
A good article on security and XSS, but the conclusion is a little disappointing. The headline makes it seem like the author knew why Billabong got hacked, so the whole time I was reading, I was waiting for the big reveal. But then when it comes down to it, his conclusion is, "I don't know, there's a long list of things wrong with the site, but it was probably SQL injection." Felt kind of like watching that M Night Shyamalan movie with the aliens.
- rwmj 14y agoNonsense. The author demonstrates a range of obvious vulnerabilities in the site. The fact of which of these happened to be exploited this time is pretty irrelevant when the website as a whole is so poorly implemented.
- danso 14y agoExactly...the smorgasbord of security failures was the great point of the OP. If the hack actually occurred because an employee decided to go OfficeSpace on Billabong, that would not invalidate the value of the OP in the least.