Hacker News new | ask | show | jobs
by HRoark 5478 days ago
I read for most of their hacks they used SQL injection. Any know how that works exactly?
3 comments

Input isn't properly sanitized by the server thus allowing an attacker to run code through the database. Fairly easy to test for.
It's pretty embarrassing that none of these big corporations (PBS, Sony) can't even take some time to test for security flaws considering that SQL injection like you mentioned is easy to test for.