News for hackers. Stuff that matters.

A comment on Equifax Faces Multibillion-Dollar Lawsuit Over Hack. Parent comment

Re:Equifax Faces Multibillion-Dollar Lawsuit Over Hack by olivier1664 on Tuesday September 12, 2017 @08:13AM (#15226614)
To sum up your link, the vulnerability is the use of an unsafe deserialization similar to:

    ObjectInputStream ois = new ObjectInputStream(input);
    MyObject obj = (MyObject)ois.readObject();
https://lgtm.com/blog/finding_unsafe_deserialization_with_ql
[ Parent | on HN ]

There are no comments on this comment yet.