Slashdot Mirror
Network Solutions Suffers Massive Data Breach
dasButcher writes "Network Solutions, the domain registration and hosting service company, suffered a massive security breach that lasted three months and exposed tens of thousands of credit card numbers of its customers and of the businesses that use its hosting and online payment processing service. The company is just beginning the victim notification process. 'There is no information on how the code was planted on the sites. While examination of the code shows that it had the ability to ship data off to a third party, and Network Solutions believes that it did just that, the exact code is not available for public review. There is also no public information as to where the data believed to be stolen was sent.'"
Give me a break! - I too worked for Network Solutions as Level II support - I know all about the bullshit story lines in order to save face. iframe exploits throughout the customers sites, issues not followed through on, the denial of New Ventures having -any- affiliation with NetSol. The ease of gaining access.
In fact while I worked there, several Tech's uploaded basic http shell emulators onto their sites and all had root level access within minutes.
Your infrastructure was and still is seriously flawed and appears that it always will be - I know first hand!
I'll file this under TasteButDontSwallow
Never try to beat a professional at his own game!