Oklahoma Leaks 10,000 Social Security Numbers 245
DrJokepu writes "Apparently the folks at the Department of Corrections of Oklahoma just forgot to use common sense when they created the state's Sexual and Violent Offender Registry. By putting SQL queries in the URLs, they not only leaked the personal data of tens of thousands of people, but enabled literally anyone with basic SQL knowledge to put his neighbor/boss/enemies on the sexual offender list. Fortunately, after the author of the blog The Daily WTF notified the department about the issue, the site went down for 'routine maintenance' on April 13 2008."
Oblig. (Score:5, Funny)
(2)Put your own name in the registry
(3)Sue the state
(4)Profit!!!
(5) (remember to have your name removed from the registry!)
Re:Oblig. (Score:5, Funny)
This is government you're dealing with. It will never happen.
"But, but, I sued the state and won! Look, here's my legal documents! I'm not a sexual predator, honest!"
"Yeah, sure.. Time to organize the community to hassle you until you leave. Enjoy being a hermit you sick pervert."
Re:Get your lawyer ready.... (Score:4, Funny)
Re:*facepalm* (Score:4, Funny)
It's scary how lazy some of the web developers are. For years Yahoo used a system where their login system had the URL to go to once login succeeded urlencoded in the URL. It would have been exceedingly easy to duplicate the login page with a "Username/Password was typed incorrectly. Please try again." Then send people to the authentication page with your page as the follow-on one.
URLs should only be able to contain sanitized field values to search on that the server composes into actual SQL, URLs, etc.
i dare someone (Score:3, Funny)
Humor? (Score:4, Funny)
Generally, no retraction is ever as effective as the original statement. That's probably one of the reasons why libel is such a big deal for some people--just saying "sorry, we were wrong" may not be good enough.
Re:*facepalm* (Score:2, Funny)
Re:Added to list (Score:4, Funny)
Re:Pleeeese! (Score:3, Funny)
>>--[joke]--->
__0__ <- your head
|
obligatory (Score:3, Funny)
injectin sql.
Obligatory XKCD reference (Score:4, Funny)
http://xkcd.com/327/ [xkcd.com]
Re:*facepalm* (Score:1, Funny)