TopTV website gets hacked

[jes]

TopTV website gets hacked

TopTV’s website has been hacked, raising questions about potentially sensitive information landing in the hands of the hackers

 

[Sodan]

So was any sensitive information (e.g. customer details) leaked or not?

 

[j4ck455]

So was any sensitive information (e.g. customer details) leaked or not?

I would also like to know the answer to that question but I think the answer is probably yes considering that their contact us page is not yet operational and that a database was most likely compromised:

 

[Ipwn 4]

I would also like to know the answer to that question but I think the answer is probably yes considering that their contact us page is not yet operational and that a database was most likely compromised:

Most scrip kiddie hacks make use of contact us template pages for SQL injection, this then exposes the db belonging to the website. Generally this db contains basic info and not credit card details etc.

 

[Pada]

... and this is why you don't use old open source CMS products that may have vulnerabilities!

These websites most likely only contained information that aren't sensitive at all.

 

[blunt]

... and this is why you don't use old open source CMS products that may have vulnerabilities!

These websites most likely only contained information that aren't sensitive at all.

+1 to both points

 

[avert]

... and this is why you don't use old open source CMS products that may have vulnerabilities!

Let me correct you, this is why you dont use any old customer facing products that have vulnerabilities.

 

[kingrob]

PG Glass is still screwed up.

Guess who is still on holiday?

 

[Other Pineapple Smurf]

... and this is why you don't use old open source CMS products that may have vulnerabilities!

These websites most likely only contained information that aren't sensitive at all.

Has nothing to do with Open Source products, but everything to do with poor security management. You could have the best closed source product deployed but you could still have vulnerabilities in your control panel, your web server, your SQL database, your FTP, etc

 

[Prof.Merlin]

Has nothing to do with Open Source products, but everything to do with poor security management. You could have the best closed source product deployed but you could still have vulnerabilities in your control panel, your web server, your SQL database, your FTP, etc

Yeah, just look at windows!

 

[j4ck455]

[highlight]Has nothing to do with Open Source products, but everything to do with poor security management.[/highlight] You could have the best closed source product deployed but you could still have vulnerabilities in your control panel, your web server, your SQL database, your FTP, etc

Exactly

Most scrip kiddie hacks make use of contact us template pages for SQL injection, this then exposes the db belonging to the website. Generally this db contains basic info and not credit card details etc.

I don't know about you but I consider any and all of my personal details (including name and contact details) to be sensitive information whereas I consider my ID number, credit card and other banking details to be even more privileged than my contacts details.

IMHO there should be no reason for storing customer contact details in a database that is accessible from a webserver via the Internet, a contact us form should collect and relay the data to an internal server but never store the data at the point of collection.

 

[Zewp]

TopTV still exists? :erm:

 

[JNG]

@kingrob: PG Glass hacked too? I looked now and all seems ok (?).

 

[j4ck455]

@kingrob: PG Glass hacked too? I looked now and all seems ok (?).

It is stated in the article.

 

[frailwings]

Worried about credit card details with all these hackings