3 ms·
How does a security company not have sql injection protection!!!?? The irony is frightening.
by randyrand 12y ago
How does a security company not have sql injection protection!!!??
The irony is frightening.
- rjaco31 12y agoIIRC HBGary got powned exactly like that
- tripzilch 12y agoHBGary also got social-engineered with emails to an oversees sysadmin. At that point they already had used some relatively minor security exploit, then used the social-engineering to escalate privileges further. (this is from vague memory, I may have gotten some details wrong here)
- debac 12y agoAmong other things http://arstechnica.com/tech-policy/2011/02/anonymous-speaks-the-inside-story-of-the-hbgary-hack/ http://arstechnica.com/tech-policy/2011/02/anonymous-speaks-...
- babuskov 12y agoThey specialize in breaking security, not making it stronger. Same reason no thief would bother to install top-notch security system for his house.