Google fixes Web site security bug

TalkBack 4 of 12:

Next »

« Previous

• Thread View
• Flat View

My bad Word document doesn't hurt other users...

Yes, that's an excellent point, but the dark side of this story, is that one malicious user or program can destroy the binary/data that we all use. Let's face it, it really stinks that a bug in application X, which allows the web server to be attacked can then be used to mess up zapplication Y. For example, some DBA accidentally gives the database user for one app the admin role. Then someone code injects, say, a command to drop all database tables into their search query in one app, and that app merely SQLizes that search query (see things coded like that WAY too many times!). Now the entire server is wiped out.

Unfortunately, rapid patching, whether it be on the client side or the server side is only half the equation. It's pretty pathetic that Google let themselves be wide open to this, a rather common type of webserver hack. And when you consider the number of people who use Google, attacking that is like simultaneously hacking 50% of the computers in the world. That's a heck of a lot more computer than are effected by most bugs, including most widespread Windows bugs (because they usually only effect one version of Windows...).

J.Ja

Posted by: Justin James   Posted on: 10/10/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• IBM Smart Business Time Savings Test IBM If time is money - is your organization in need of a way to save both? ... Download Now
• Busting the myths about QuickBooks Enterprise Solutions and IBM Smart Business IBM So you already know there aren't actually any alligators in the New York ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now