Slashdot Mirror


SQL Injection Turns BusinessWeek Into Viral Replicator

martins writes "The website of popular magazine BusinessWeek has been attacked via SQL injection in an attempt to infect its readership with malware. Hundreds of pages in a section of BusinessWeek's website which offers information about where MBA students might find future employers have been affected."

7 of 116 comments (clear)

  1. Hmm by LizardKing · · Score: 5, Funny

    It really is fscked. Every job advert is for Lehmans.

  2. ATTENTION WEB DEVELOPERS by Anonymous Coward · · Score: 5, Insightful

    HAI!

    Just a friendly reminder - your Database Admin will be more than happy to set up multiple users for you with different permissions. For instance, a user with "write" privileges that can be used by the website backend page that the editors use, and a user with "read only" permissions that the public facing web server(s) will use when presenting the page to the public.

    That is all.

  3. Bobby Tables is at it again... by Anonymous Coward · · Score: 5, Funny

    Bobby Tables is at it again...

  4. Re:Bobby Tables is at it again (obligatory link) by CaraCalla · · Score: 5, Informative
  5. Nit pick time. by BitterOldGUy · · Score: 5, Informative

    Many of them while good at what they do, wants to further their career so go for an MBA so they be considered qualified for promotion.

    To nitpick:

    That depends on your company and their policies. Therefore ask HR. I did once to see what they'd do for me. The answer was that I'd get a $3,000 raise for having a graduate degree. I asked for clarification regarding why she put that way; "You mean, I would get the raise regardless of what masters degree I received?"

    "Yes. Of course your manager has to approve it."

    Another thing to clarify, and I've found this out the hard expensive way: getting an MBA does NOT automatically give you a ticket into management. Here's what I was told by several folks: You need management experience for an MBA to mean something. Without the experience, the MBA is worthless. So now, I'm a coder with an MBA - it's not doing me any good. And like a stupid SOB, I paid for it with student loans. I did it when I was out of work thinking that it would get me a management job. Schools are so quick to tell you that their MBA will further your career. BS! Experience matters more than the degree - and networking (i.e. It's who you know.)

    So here's what I would do differently, get into management, see if my company requires an MBA for my position, get them to pay for it, bust my ass in night school, some profit! But if they don't require it, I don't see the point in getting one.

    And there's going to be a HUGE glut of MBAs. With this down economy, MBA enrollments have gone through the roof. Which means, in two years, the already huge glut of MBAs is going to get bigger.

  6. Re:MBA students, appropriate. by David+Gerard · · Score: 5, Informative

    Depends. Alan Cox is a top-class programmer who got an MBA because there was this whole other world that intersected with what he did that he didn't understand.

    --
    http://rocknerd.co.uk
  7. Re:Malic or incompetence? by ednopantz · · Score: 5, Interesting

    They just don't teach anything about security in schools. We interviewed an intern candidate this spring and asked her how one would avoid a SQL injection attack.

    Her response: "Don't use Microsoft products."

    Swing and a miss!

    The candidate's sample code had a big 'ol SQL injection vulnerability. Yet the instructor raved over his project.