Slashdot Mirror

← Back to Stories (view on slashdot.org)

Google Hands Out Web Security Scanner

Posted by Soulskill on from the like-giving-deodorant-to-your-special-friend dept.

An anonymous reader writes "Apparently feeling generous this week, Google has released for free another of their internally developed tools: this time, a nifty web security scanner dubbed skipfish. A vendor-sponsored study cited by InformationWeek discovered that 90% of all web applications are vulnerable to security attacks. Are Google's security people trying to change this?"

2 of 65 comments (clear)

  1. Google API by Tokerat · · Score: 4, Interesting

    Considering how many web apps use Google APIs in some form or another these days, I'd say it's in their best interests to ensure those sites don't all become a liability to eachother by way of their centralized cloud.

    --
    CAn'T CompreHend SARcaSm?
    1. Re:Google API by girlintraining · · Score: 5, Interesting

      I'd say it's in their best interests to ensure those sites don't all become a liability to eachother by way of their centralized cloud.

      Given how most websites still use homebrew code and database interactions, and that's the most common route of infection (injected code), this only covers a small range of possible attack vectors.

      --
      #fuckbeta #iamslashdot #dicemustdie