“NASDAQ is owned.” Five men charged in largest financial hack ever • Hacker News Board

Re: “NASDAQ is owned.” Five men charged in largest financial hack ever

#141

Post by readysetgo » Sat, Jul 27, 2013, 6:41 PM UTC

luminiferous wrote: post #88

readysetgo wrote: post #51

Earlier quoted context omitted.

People don't often die from terrorism. He is much more likley to die from diabities, heart disease, cars or a gun shot. More toddlers with guns have killed Americans this year than terrorist have. If we are trying to save lives, worrying about terrorism is a waste of money.

I'm fairly certain he was being facetious.

I would hope so, but even so the character hes playing isn't clever.

Re: “NASDAQ is owned.” Five men charged in largest financial hack ever

#142

Post by christianh » Sat, Jul 27, 2013, 9:02 PM UTC

Well maybe there's some light at the end of the tunnel: If hackers had an easier way to gain recognition and being rewarded when they discover vulnerabilities, I'm certain most would choose to disclose their findings rather than try selling them on the black market. I'm working on a startup right now, www.crowdcurity.com, where we want to let any site easily create a bug bounty program (similar to Google, Mozilla, Paypal, etc.) and thereby leverage testers around the world to find vulnerabilities; hopefully initiatives like this will strengthen the security of web apps and websites around the world.

Re: “NASDAQ is owned.” Five men charged in largest financial hack ever

#143

Post by sirsar » Sun, Jul 28, 2013, 12:52 AM UTC

k_bx wrote: post #133

sirsar wrote: post #21

Earlier quoted context omitted.

Sanitizing your inputs is apparently even harder than salting and hashing your passwords, something even the big-name companies tend to mess up. Sigh.

You don't even need to sanitize them, actually.

That's true. For example in Python, you declare the query as "Select * from a where b=? and c=d" and then put a tuple (z,) to specify b.

It's something the NYSE should get "hip" to.