About those half million SQL injection attacks

george_ou@lanarchitect.net — Tue, 29 Apr 2008 07:51:00 GMT

Nathan McFeters has written one of the best explanations I've seen about the latest rash of SQL injection attacks at my old security blog Zero Day. Nathan took the opertunity to point out another serious hole in the PCI (Payment Card Industry) standards which allow vendors to skip web application security audits if they simply buy a Web Application Firewall.

Earlier this year I had pointed out that the PCI security standards force you to run wireless LAN security schemes that put your laptops in more danger.

George Ou's technology blog

About those half million SQL injection attacks