Hacking Web Services

siduri writes "Udi Manber, chief scientist at Yahoo!, gave a great talk on the kinds of hacks that Yahoo sees at the IEEE's Symposium on Security and Privacy. I wrote an overview of his talk for Dr. Dobb's Journal. While some of the message is well-known stuff (like that people will spend a lot of time hacking the most trivial things), the details of what Yahoo has to deal with are really pretty interesting."

Comments

Re:illegitimate rating

[jukal]

(Score:0, Offtopic)

Offtopic my ass. Krhm ;) To get serious, I have been thinking that you guys at Slashdot should apply some modern mathematics to the "ranking" algorithm.

I mean, if an article receives mutltiple negative moderations, say four minuses for example, it probably means that the writer of the article had something interesting to say, as it touched the feelings of those modederators.

Therefore a pair of two minuses should become a plus (if the article has received four or more moderations), therefore, an article with four - (minus) moderations would have interest rating of +2 . The karma yielded from the article would still be negative.

Atleast I would be happy with this, because then I might actually have a chance to see some "alternative thinking" in addition to the "standard opinion" accepted by the slashdot teens making the moderations ;)

Re:Identity Theft

[Elbereth]

You can't get a credit card in my name unless you've managed to get more than my personal information: you've managed to take over my personal home phone number and intercept all telephone calls to me; you've managed to steal all my USPS mail and e-mail; you've managed to forge my signature exactly.

Sorry, but that doesn't happen.

Identity theft is urban folklore and one thief getting very lucky with his social engineering.