[Previous entry: "Nice ideas to scrape the alert log in Windows"] [Next entry: "A new SQL Injection protection PL/SQL package"]
David Litchfield has started a new blog
October 27th, 2007 by Pete
Post to del.icio.us
Post to Furl
I got an email from David today to let me know that he has started a new blog (Its good to see that he using GreyMatter Weblog software, software that I am also helping to develop) on a domain called www.davidlitchfield.com that looks to be set up as Davids personal site. David has an first interesting blog entry titled "SQL Injection and Data Security Breaches" that discusses some real SQL Injection attacks and also the reality of what can happen in such easy attacks, i.e. very large quantities of identities revealed or stolen and the breach of credit card details. The thing that stuck out for me was that reseachers found most of these and that in most cases they were very simple bugs. The worrying thing for these guys should be did anyone else find these bugs before who were less inclined to let them know about it?? - this is the worry for SQL Injection or any bug that discloses critical data, its found and fixed but did anyone find it before that and exploit it?
October 27th, 2007 at 10:15 pm
Markus Perdrizat says:
It's not a blog if it doesn't contain a feed. Where do GreyMatter blogs usually make their feed available? Both I and Google Reader are unable to find David's feed.
I'd love to read his blog, but I'll never find the time to follow websites that don't have a feed.