News for hackers. Stuff that matters.

A comment on Slack was hacked. Parent comment

Re:Slack was hacked by azinman2 on Friday March 27, 2015 @01:14PM (#9277619)
Why would you assume that? There are plenty of ways to hack into stuff without sql injections.
[ Parent | on HN ]
Re:Slack was hacked by elchief on Friday March 27, 2015 @01:17PM (#9277643)
It's the most common vulnerability. https://www.owasp.org/index.php/Top_10_2013-A1-Injection
[ Parent | on HN ]
Re:Slack was hacked by scrollaway on Friday March 27, 2015 @01:47PM (#9277876)
It's the most common vulnerability on the web. It's certainly not the most common vulnerability in projects built under popular non-php frameworks. Under that model, it's harder to create a situation where a SQL injection is possible than not.

Edit: Slack's in PHP, I thought it was in RoR for some reason. Oops.

[ Parent | on HN ]
Re:Slack was hacked by alexhill on Friday March 27, 2015 @02:12PM (#9278055)
Slack is a web service written in PHP, so I'd say elchief's assumption is reasonable.
[ Parent | on HN ]
Re:Slack was hacked by thedufer on Friday March 27, 2015 @11:28PM (#9280389)
Additionally, Slack has had SQLi attacks found against it in the past, which is proof that they aren't defending against it systematically.
[ Parent | on HN ]