|
|
GuyThiebaut wrote: I am amazed at how this can still happen nowadays...
Have you been to Q&A recently ? The people asking question there are the same that are supposed to understand what SQL injection is and how to protect their code against them.
Still amazed ?
|
|
|
|
|
I got a mail from them this morning:
"We are not aware of any misuse of the accessed data, but we have identified that your email address was in one of the records accessed, though it contained none of the optional information, so we believe that the only potential impact to you may be unsolicited email. Nokia apologizes for this incident."
|
|
|
|
|
IMHO that's a bit like saying "Your car was stolen from our unlocked garage, but we're not aware that it's been damaged or that it's been used in the commission of a crime. So rest easy." 
/ravi
|
|
|
|
|
"We noticed someone has copied your passport. We believe they're just trying to forge a passport with your name on it and sell it on the black market. The only potential impact to you may be additional security checks at the airport, so it's no big deal really. Oh by the way, we're sorry."
Giraffes are not real.
|
|
|
|
|
I got an email from them this morning and promptly deleted it. Nokia developer? I'm mean really - does such a thing exist today? Had to go look in my deleted mails to find it.
Interesting.
|
|
|
|
|
I think the problem is that they don't seem to teach anything about injection attacks on IT courses any more - they just seem to go "Here is a SELECT statement, now lets move on". Certainly the number of Q&A questions that leave massive security holes is not reducing.
Teach the little buggers about Parametrized queries from day one! Or are all lecturers too damn lazy to bother?
Sorry, but SQL injection attacks are one of my personal bugbears...
Real men don't use instructions. They are only the manufacturers opinion on how to put the thing together.
Manfred R. Bihy: "Looks as if OP is learning resistant."
|
|
|
|
|
I'll have to say, I never even heard the words "sql injection" during ANY of my classes... you might indeed have a point.
Programming is a race between programmers trying to build bigger and better idiot proof programs, and the universe trying to build bigger and better idiots, so far... the universe is winning.
Be careful which toes you step on today, they might be connected to the foot that kicks your butt tomorrow.
You can't scare me, I have children.
|
|
|
|
|
gavindon wrote: I never even heard the words "sql injection" during ANY of my classes
It's true. All I know about sql injection I've learned from the internet...
|
|
|
|
|
Isn't the "Nokia's developer network" now MSDN? Since they've switched to WP7 and all...
|
|
|
|
|
|
And so easy to prevent!
Simply check if the sql statement to execute contains the words table, drop, delete, select... 
It's an OO world.
|
|
|
|
|
|
You can't just keep posting links to random pages, have you got an opinion to make or is there something particularly noteworthy in the link that we must see.........
you are just going to be voted to hell if you keep doing it.
|
|
|
|
|
I'm sorry you felt that way, I read on this site a while ago about the era of PCs and I felt it'll be good to read about people's opinion about it.
|
|
|
|
|
You're also reposting. This was discussed when the news first broke a week or two ago.
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-----
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-----
"Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass." - Dale Earnhardt, 1997
|
|
|
|
|
So you are a blank page, with no opinions of your own? It's customary to provide some comment of your own - we had somebody who used to do as you are doing now called Satips and he was hounded off the site because of this offence.
Perhaps if you make some comment of your own you might not attract the 1 votes like pooh attracts flies.
|
|
|
|
|
It appears he is a Nigerian General...
------------------------------------
I will never again mention that I was the poster of the One Millionth Lounge Post, nor that it was complete drivel. Dalek Dave
CCC Link[ ^]
Trolls[ ^]
|
|
|
|
|
" Satips and he was hounded off the site because of this offence."
Are you sure Satips is gone and no posting under a different name, say Sunny something or other 
|
|
|
|
|
Pete O'Hanlon wrote: ...like pooh attracts flies.
I always thought he had a thing for honey and bees. 
"One man's wage rise is another man's price increase." - Harold Wilson
"Fireproof doesn't mean the fire will never come. It means when the fire comes that you will be able to withstand it." - Michael Simmons
"Some people are making such thorough preparation for rainy days that they aren't enjoying today's sunshine." - William Feather
|
|
|
|
|
And another thing;
Looks like Facebook doesn't like your profile, the link you posted in your profile is dead......
Did you breach their terms of service? 
|
|
|
|
|
I think you should get out of the posting random links without comment business.
|
|
|
|
|
|
Not funny.
Not appropriate.
Not very good at all.
Real men don't use instructions. They are only the manufacturers opinion on how to put the thing together.
Manfred R. Bihy: "Looks as if OP is learning resistant."
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
