Re:Android Forums hacked: 1 million user credentials stolen
by peterwwillis on Thursday July 12, 2012 @04:44PM
(#4236691)
I'd love to know what the security experts here think.
Oh goody! Another million credentials to refine my password dictionary!
If it was a known vulnerability there is nothing to learn but "patch your shit". But if you want some advice, the only thing you can learn from somebody exploiting a web application (assuming the hole was in vBulletin, which we have no idea) is that you can't trust the security of web applications. Do all the general system-hardening stuff that nobody ever does, install a webapp firewall, and pray.
Oh goody! Another million credentials to refine my password dictionary!
If it was a known vulnerability there is nothing to learn but "patch your shit". But if you want some advice, the only thing you can learn from somebody exploiting a web application (assuming the hole was in vBulletin, which we have no idea) is that you can't trust the security of web applications. Do all the general system-hardening stuff that nobody ever does, install a webapp firewall, and pray.