Developing Safe Sites is Hard
Developing safe websites is a difficult task for any developer, so when the experts are caught developing and operating sites that are vulnerable to attack, it is a timely reminder that keeping systems safe against potential attack takes a lot of work.
It was recently disclosed that the Internet Storm Center (part of SANS) was vulnerable to an XSS attack through the search box on the site. While there are many, many sites vulnerable to XSS attacks, public acknowledgement of the issue by site administrators is rare. The developer's initial reaction of scepticism and denial provides an insight into how a significant percentage of vulnerability notifications proceed - ignorance or dismissal of the report, even more so from those who are 'experienced' or 'expert' security personnel.
4 June 2007
Let our Free OS X Screen Saver deliver the latest security alerts and commentary to your desktop when you're not at your system.
Comments will soon be available for registered users.
Subscribe to our feed.