Re: Exploiting an online store

[Gadi Evron <ge () linuxbox org>]

Josh perrymon wrote:
> I was reading an article about an attacker that could have changed a
> price in an online shopping cart-

Check the date of the article. That company no longer exists and SQL 
injections are not THAT big of an issue for established eCommerce sites 
as they were in 1999.

Web security is still a major issue, but this article is nothing but FUD 
in 2005.

Eran Reshef is now CEO of the infamous Blue Security.

        Gadi.

--
Available for consulting:
+972-50-5428610 / ge () linuxbox org.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/