Slashdot Mirror

← Back to Stories (view on slashdot.org)

Cache On Delivery — Memcached Opens an Accidental Security Hole

Posted by timothy on from the everything-has-a-downside dept.

jamie spotted this eye-opening presentation (here's a longer explanation) about how easy it is to access sensitive data on many sites using memcached, writing "If you already know what memcached is, skim to slide #17. The jaw-drop will happen around slide #33. Turns out many websites expose their totally-non-protected memcached interface to the Internet, including gowalla, bit.ly, and PBS."

5 of 149 comments (clear)

  1. Re:More Boiled and Distilled. by pushing-robot · · Score: 4, Funny

    As spokesman for the Justice League, I say yes.

    --
    How can I believe you when you tell me what I don't want to hear?
  2. Re:More Boiled and Distilled. by davester666 · · Score: 4, Funny

    No. Car. Was. Involved.

    --
    Sleep your way to a whiter smile...date a dentist!
  3. Re:More Boiled and Distilled. by outsider007 · · Score: 5, Funny

    That's actually more of a feature.

    --
    If you mod me down the terrorists will have won
  4. Re:More Boiled and Distilled. by Farmer+Tim · · Score: 5, Funny

    That's. Why.

    --
    Blank until /. makes another boneheaded UI decision.
  5. Re:A few clarifications by IAmGarethAdams · · Score: 5, Funny

    Mostly through rouge employees

    Luckily, they often get caught red-handed.