News for hackers. Stuff that matters.

A comment on “NASDAQ is owned.” Five men charged in largest financial hack ever.

Re:“NASDAQ is owned.” Five men charged in largest financial ... by k_bx on Thursday July 25, 2013 @03:59PM (#6104599)
> SQL-injection

> NASDAQ

[ Parent | on HN ]
Re:“NASDAQ is owned.” Five men charged in largest financial ... by sirsar on Thursday July 25, 2013 @04:32PM (#6104782)
Sanitizing your inputs is apparently even harder than salting and hashing your passwords, something even the big-name companies tend to mess up.

Sigh.

[ Parent | on HN ]
Re:“NASDAQ is owned.” Five men charged in largest financial ... by PlaneSploit on Thursday July 25, 2013 @04:42PM (#6104842)
Little Bobby Tables, we call him.
[ Parent | on HN ]
Re:“NASDAQ is owned.” Five men charged in largest financial ... by dpatru on Friday July 26, 2013 @05:13AM (#6107261)
http://xkcd.com/327/
[ Parent | on HN ]
Re:“NASDAQ is owned.” Five men charged in largest financial ... by k_bx on Friday July 26, 2013 @08:51AM (#6107902)
You don't even need to sanitize them, actually.
[ Parent | on HN ]
Re:“NASDAQ is owned.” Five men charged in largest financial ... by sirsar on Saturday July 27, 2013 @08:52PM (#6115090)
That's true. For example in Python, you declare the query as "Select * from a where b=? and c=d" and then put a tuple (z,) to specify b.

It's something the NYSE should get "hip" to.

[ Parent | on HN ]
Re:“NASDAQ is owned.” Five men charged in largest financial ... by tracker1 on Thursday July 25, 2013 @04:22PM (#6104721)
That was my first note as well.. imho, they deserved to get hacked.
[ Parent | on HN ]