Usa.Kaspersky.com hacked

http://hackersblog.org/2009/02/07/usakasperskycom-hacked-full-database-acces-sql-injection/

by mindplunge • 17 years ago

16 5 17 years ago

jacquesm• 17 years ago

Ouch. For a company like Kaspersky this is about as damaging as it gets. The screenshots suggest the author really 'did it', though I wonder why he chose to write about it instead of alerting Kaspersky.

One more reason to make sure you check each and every avenue of user supplied data for SQL injection. What really surprises me is that they don't use prepared statements.

RossM• 17 years ago

> though I wonder why he chose to write about it instead of alerting Kaspersky.

Probably for the "fame". I have to say I'm hardly impressed by the recent exploits that I've seen, the phpBB.com one for example.

omouse• 17 years ago

It is hardly impressive because the hard work was already done by someone else :/

JBiserkov• 17 years ago

>"I wonder why he chose to write about it instead of alerting Kaspersky" Because if a security software company cannot secure it's own data, they must be ashamed of themselves. By making their shame public, the guy is trying to make them work harder. Or RossM is right and he's doing it for "fame".

tptacek• 17 years ago

I'm not sure what building a secure PHP support applications and building antivirus software have to do with each other. But then, I'm also not sure what antivirus has to do with security, so maybe you're right.

Usa.Kaspersky.com hacked

Related Stories