TalkTalk cyber-attack: boy, 15, arrested in Northern Ireland

Re:TalkTalk cyber-attack: boy, 15, arrested in Northern Ireland by monksy on Monday October 26, 2015 @04:32PM (#10454263)

You would be suprised... There are startups out there who say "we don't care about an attack we're too small... we're going to write all of our sql by hand."

[ Parent | on HN ]

Re:TalkTalk cyber-attack: boy, 15, arrested in Northern Ireland by 0942v8653 on Monday October 26, 2015 @04:42PM (#10454324)

Just because they "write all of [their] sql by hand" doesn't mean they will be vulnerable to an attack as simple as this. This is just pure and unmitigated incompetence.

[ Parent | on HN ]

Re:TalkTalk cyber-attack: boy, 15, arrested in Northern Ireland by tsotha on Monday October 26, 2015 @06:13PM (#10454866)

Yes. Preventing SQL injection attacks is very, very easy. To have something like that in your code in 2015 is inexcusable.

[ Parent | on HN ]

Re:TalkTalk cyber-attack: boy, 15, arrested in Northern Ireland by radicalbyte on Monday October 26, 2015 @04:47PM (#10454359)

It's not just startups. The stuff I've seen at some very large companies would make you cringe.

As a colleague developer of mine says: I don't want any of my personal information on the internet because I know how developers think.

Sigh.

[ Parent | on HN ]