The Insider News

   

The Insider News is for breaking IT and Software development news. Post your news, your alerts and your inside scoops. This is an IT news-only forum - all off-topic, non-news posts will be removed. If you wish to ask a programming question please post it here.

Get The Daily Insider direct to your mailbox every day. Subscribe now!

You must Sign In to use this message board.

Search this forum   Profile popups    Spacing RelaxedCompactTight   Noise Very HighHighMediumLowVery Low   Layout Open AllThread ViewNo JavascriptPreview   Per page 102550

View All Threads First Prev Next

How Yahoo got hacked through 3rd party code. SoMad 1 Feb '13 - 13:35  Securityweek[^] This attack underscores the security problem posed by third party code. In this case, the vulnerable application was probably not coded by Yahoo! team, and not even hosted on Yahoo’s server farm, leaving Yahoo! with the full responsibility for securing the application on one hand, and a very limited capability to actually control the code, on the other hand. Full report from Imperva (PDF)[^] Apart from the SQL injection bit, this reminds me of the way David gained access to the WOPR in WarGames[^] 30 years ago - There was an open line at our division in Sunnyvale. The phone company screwed up.[^].   Soren Madsen "When you don't know what you're doing it's best to do it quickly" - Jase #DuckDynasty Sign In·Permalink

Last Visit: 31 Dec '99 - 18:00     Last Update: 24 May '13 - 9:13 Refresh 1

General    News    Suggestion    Question    Bug    Answer    Joke    Rant    Admin