mackymc (November 30th, 2008 @ 4:06 pm)

Gotta admit... thats pretty clever!! : /

GlitchBusters2 (November 30th, 2008 @ 3:37 pm)

how do they do it?

libdash (November 30th, 2008 @ 3:09 am)

That boy looks like a total douch with his tie and white shirt

termites21 (November 29th, 2008 @ 1:29 pm)

Wicked cool!!!!

TGDragon (November 26th, 2008 @ 11:56 pm)

lol looks like fun

yaelbj (November 23rd, 2008 @ 11:48 pm)

OMG, THE WORLD IS GOING THRU A CRISIS... THE INFORMATION FROM CELLFONES ARE BEING STOLEN... OMG OMG OMG... yes i am being sarcastic... look what ppl think is the major priority on the world... i mean please... there are more important things to worry about right now... MILLIONS OF PEOPLE ARE DYING BECAUSE THEY DONT HAVE WATER OR FOOD... AND ALL THESE PPL CARE IS THEIR INFORMATION TO BE STOLEN PFROM THEIR PHONE?

karloangs (November 21st, 2008 @ 5:28 pm)

wow where can i get that kind of stuff/

amdo2008dragon (November 18th, 2008 @ 6:21 pm)

Like the guy who puts on tennis shoes to avoid a bear attack -- not to outrun the bear, but to outrun the peoples hes with, taking simple steps to secure the data on your website, and, with so many vulnerable websites still on the internet, hackers will still have plenty of other easy internet pickings to feed on

amdo2008dragon (November 18th, 2008 @ 6:20 pm)

So how do you prevent an SQL vulnerability? One way is to avoid using dynamically generated SOL in your code, which you do by using parameterized queries and stored procedures. The other way to avoid an SQL injection attack is by giving away as little information as possible when an error does occur.

amdo2008dragon (November 18th, 2008 @ 6:19 pm)

To uncover vulnerable websites, all a hacker has to do is type the single quote into a websites' URL or data field. A vulnerable website will then respond with an SQL error message. To speed up the search for vulnerable websites, hackers can quickly search for websites open to this hack.

amdo2008dragon (November 18th, 2008 @ 6:18 pm)

The SQL injection is easy to pull off because, where most systems separate code and data, SQL combines them, so all a hacker has to do is combine some of his own code with the data he sends to a website to gain control of it. The code usually starts with a single quote (), which, with SQL, represents the separation between code and data, and SQL assumes that whatever follows the single quote is code it needs to run.

amdo2008dragon (November 18th, 2008 @ 6:14 pm)

According to Errata Security, the United Nations website was recently hacked using a simple SQL injection bug. And while this vulnerability might seem surprising for a site as well known as the UN, numerous sites all over the internet have proven exceedingly vulnerable to an SQL injection attack.