(ericdaigle.ca)

227 points mtlynch | 1 comments | 03 Jul 25 14:56 UTC | HN request time: 0.203s | source

Show context

bspammer ◴[08 Jul 25 16:54 UTC] No.44501795[source]▶

It's unexpected to me that someone with the technical knowhow to build spyware like this and a nice web interface for it, made basic mistakes like storing passwords in plaintext and piping unescaped user input into database queries.

replies(5): >>44502429 #>>44502756 #>>44504575 #>>44505187 #>>44507272 #

1. andoando ◴[08 Jul 25 22:23 UTC] No.44504575[source]▶

>>44501795 #

They probably just didn't care to

↑

Taking over 60k spyware user accounts with SQL injection