|
|
|
Login over HTTP; SQL injection; passwords stored in plain text; detailed YSOD error messages open to the entire world.
Whatever his "own security system" is, the only reason it's "never been breached in more than 15 years" is clearly because nobody was using the site. 
And the subscribers are right to be concerned. Just because nobody had taken the site down prior to this complaint, that doesn't mean it's never been breached. Someone could have quietly "exfiltrated" the subscribers' details at any time without being noticed.
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
Is there a term for when a business publicly flaunts their online "security" only to be royally reamed by the various denizens of the internet? Just curious since this seems to happen every couple of months.
|
|
|
|
|
|
Message Closed
modified 21-Nov-20 21:01pm.
|
|
|
|
|
Haha, I was looking for something similar to what happened with the Streisand Effect[^] but "oblivious self-baiting" is a pretty good summation 
|
|
|
|
|
Let's stick a flag in it, and call it "oiled & gassed".
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
Jon McKee wrote: Is there a term for when a business publicly flaunts their online "security" only to be royally reamed by the various denizens of the internet? Just curious since this seems to happen every couple of months.
Bankrupt. Liquidated. Out of business. Doomed. Etc.
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason?
Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful?
--Zachris Topelius
Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies.
-- Sarah Hoyt
|
|
|
|
|
Blowback
#SupportHeForShe
Government can give you nothing but what it takes from somebody else. A government big enough to give you everything you want is big enough to take everything you've got, including your freedom.-Ezra Taft Benson
You must accept 1 of 2 basic premises: Either we are alone in the universe or we are not alone. Either way, the implications are staggering!-Wernher von Braun
|
|
|
|
|
Thanks for posting, that was absolutely hilarious.
|
|
|
|
|
I am in total awe at the utter stupidity and ignorance on show here. Simply breathtaking. He clearly knows absolutely nothing about internet security.
On the other hand, he's now going to get free penetration testing from the rest of the Internet 
"There are two ways of constructing a software design: One way is to make it so simple that there are obviously no deficiencies, and the other way is to make it so complicated that there are no obvious deficiencies. The first method is far more difficult." - C.A.R. Hoare
Home | LinkedIn | Google+ | Twitter
|
|
|
|
|
Dominic Burford wrote: On the other hand, he's now going to get free penetration testing from the rest of the Internet
Which could be a handful too deal with.
|
|
|
|
|
Dominic Burford wrote: On the other hand, he's now going to get free penetration testing from the rest of the Internet
Somewhere on page 5 or 6 of the ars comments, is a repost from Reddit. The site owner had a phone number posted. Someone used a burner phone to call him and explain why his site was fubar and was the talk of the tech web.
Shortly afterward the site came down completely. It's not clear if the operator did it, or if a vandal went from deleting the users table via SQL injection to pwning the server fully, deleting the site, and then pwning the DNS account to convert the domain to a parking page. 
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason?
Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful?
--Zachris Topelius
Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies.
-- Sarah Hoyt
|
|
|
|
|
I noticed earlier while reading the article that the site was re-directing to a holding page. Not sure if this was a deliberate act by the site owner or by malicious intervention / attack from someone else.
"There are two ways of constructing a software design: One way is to make it so simple that there are obviously no deficiencies, and the other way is to make it so complicated that there are no obvious deficiencies. The first method is far more difficult." - C.A.R. Hoare
Home | LinkedIn | Google+ | Twitter
|
|
|
|
|
It went down incrementally. Shortly after the uproar started someone apparently SQL injected DROP TABLE Users and left it semi-broken. Then yesterday afternoon it rapidly went from display a site missing/no site type error from the web server to showing the DNS providers parking page. I haven't seen anything official about if the sites owner brought it down or if a more malicious attacker destroyed it for him.
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason?
Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful?
--Zachris Topelius
Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies.
-- Sarah Hoyt
|
|
|
|
|
Dominic Burford wrote: free penetration testing
ewww
#SupportHeForShe
Government can give you nothing but what it takes from somebody else. A government big enough to give you everything you want is big enough to take everything you've got, including your freedom.-Ezra Taft Benson
You must accept 1 of 2 basic premises: Either we are alone in the universe or we are not alone. Either way, the implications are staggering!-Wernher von Braun
|
|
|
|
|
And people laughed at me when I named my son "Robert'); DROP TABLE students;--;"
|
|
|
|
|
EFF privacy expert William Budington explains how advertisers use identifiable information inside your browser to reveal your unique digital fingerprint, even when you're surfing in private mode. tl;dr: yes
|
|
|
|
|
Quote: Through your browser alone, even in private browsing mode, web trackers can learn about your browser, your native screen resolution, your operating system, and the hardware powering your machine.
Well big, fat, hairy deal.
So advertisers can work out what ads to send me through IPs that are mostly either mapped to 127.0.0.1 or blocked by the browser itself.
What else can they do with the information they can "reap"?
Pretty much nothing.
I tolerate ads on TV, too.
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
Open source technologies are great for organizations, but they're far from perfect. As a matter of fact, many of the open source technologies in use today come with hidden costs and problems. This is according to a new report by SAS, which was created on a poll of 300 executives across the UK and Ireland. As opposed to some company's software, where the problems and costs are pretty evident
Not naming any names, but one of them is only one letter off of the report creator (and that I thought was the source of the report)
|
|
|
|
|
Gotta love betanews.
Maybe twelve of the words in the tiny "article" weren't copied and pasted in from another source.
Professional reporting at its very best.
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
Most of us have struggled with the mathematical puzzle known as the "moving sofa problem." It poses a deceptively simple question: What is the largest sofa that can pivot around an L-shaped hallway corner? I thought the only limiting factors on moving were how many friends you have, and how much beer and pizza you can afford
|
|
|
|
|
That's actually pretty interesting.
What do you get when you cross a joke with a rhetorical question?
The metaphorical solid rear-end expulsions have impacted the metaphorical motorized bladed rotating air movement mechanism.
Do questions with multiple question marks annoy you???
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
big enough for this.
