New answers tagged data-leakage
5
Ignoring for a moment the wisdom of manipulating the source code, ask yourself how this watermark should work. You need to have different files for every developer. This means some automated code transformation that doesn't change the meaning of the code, yet isn't reversible. Oh, and it shouldn't make the code difficult to maintain. At the end of the day, ...
4
Before this gets out of hand with the edits and the comments, I wanted to say this.
This is not a hypothetical situation. Almost all software companies face this problem, and it all boils down to a trust issue. This topic has been extensively discussed on other StackExchange sites, most of the answers can be summarized in:
1- Hire people you trust.
...
1
Insider knowledge / access may be a possibility. Employees with drug habits, alcohol or gambling problems, a grudge....
You also have to consider backups, discarded tapes or failed disks and test/DR databases or extracts made for data analysis. Most of these breaches would work just as effectively with data three or six months old.
PS. The Imperva blog ...
3
I don't understand how these database tables are accessed. Surely it is not SQL Injection, as that should be a thing of the past with prepared statements,
SQL injection is a big issue for a site of any size. All it takes is one missing mysql_real_escape_string() and your program is compromised. As with most things in computer security, there are ...
11
I don't understand how these database tables are accessed. Surely it is not SQL Injection, as that should be a thing of the past with prepared statements,
Ahhh assumptions.. Have you seen the OWASP Top Ten project? SQL injections have always been a constant source of security issues.
I cannot see how changing any session state would effect the ...
Top 50 recent answers are included
