On my last post I’ve written about XSS and ways to prevent it. Certainly attackers won’t resolve to this single way of attack. This time I’m going to talk about a more common way of attack: SQL injection. By definition SQL injection means to “inject” SQL code into a query. To illustrate this more clearly [...]
One of the most overlooked aspect of any website is its security. If you follow technology news you may have heard of cases of leaks and stolen passwords here and there. It is not even restricted to small sites; large sites such as linkedin have also suffered security breaches too. Surely there are many ways [...]
Every once in a while I like to review the Junk mail folder and see what gets caught in there. More often than not, they are social engineering attacks that try to get you to run an executable, office document, PDF or some other kind of file that can trigger code execution. This morning I [...]