full-disclosure - Exploiting an online store

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4328CE75.2050005@linuxbox.org>
Date: Thu Sep 15 01:29:43 2005
From: ge at linuxbox.org (Gadi Evron)
Subject: Exploiting an online store

Josh perrymon wrote:
> I was reading an article about an attacker that could have changed a
> price in an online shopping cart-

Check the date of the article. That company no longer exists and SQL 
injections are not THAT big of an issue for established eCommerce sites 
as they were in 1999.

Web security is still a major issue, but this article is nothing but FUD 
in 2005.

Eran Reshef is now CEO of the infamous Blue Security.

	Gadi.

-- 
Available for consulting:
+972-50-5428610 / ge@...uxbox.org.