3 ms·
> Mr Gonzales used a complicated technique known as an "SQL injection attack" to penetrate networks' firewalls and steal information, the US Department of Just
by naz 17y ago
> Mr Gonzales used a complicated technique known as an "SQL injection attack" to penetrate networks' firewalls and steal information, the US Department of Justice said.
I'm not at all shocked that a credit card processing company has no regard for security. Also the news media should be banned from using the word "firewall".
- swwu 17y agoAlso, SQL injection being described as "complicated"?
- deleted 17y ago[deleted]
- almost 17y agoIt sounds a little better than "using a relatively trivial attack known as 'SQL Injection'" :p
- jobrahms 17y agoI've heard of SQL injection attacks to log into websites, but this new use on firewalls is unprecedented! This man is a hacking GENIUS. We have our next Kevin Mitnick right here...
- TheBranca18 17y agoI really can't believe they called it 'complicated'.
- pj 17y agoLook we're all hackers here. We know SQL Injection isn't complicated for us, but it is complicated for the majority of the world. In fact, it's probably an impossible task for 95% of the world, and very very difficult for another 4% on top of that, and even the last 1% would have to experiment a bit to figure out which string to submit to get the information.
- tedunangst 17y agoDo you mean "any company that accepts credit cards" or "banks that issue cards"? In the first case, they care about security because breaches like this get them in hot shit with the banks. And the banks care because they have to refund the fraudulent charges. They probably don't care too much about your privacy, but they definitely would prefer to keep credit card numbers safe. Also, the usage of firewall is totally appropriate. The firewall kept the bad guys from connecting directly to the database, so they had to bypass/penetrate via the webapp.
- swwu 17y agoI see your point, but saying that a "'SQL injection attack'" was used to "penetrate networks' firewalls" really does conjure the image of somebody setting their IP to "' OR 1=1;".