Most of you probably know that the BlackHat and DEFCON security conferences happened last week.
Jeremiah Grossman (CTO of WhiteHat security) posted his BlackHat presentation on his blog today, and I thought I should share:
Get Rich or Die Trying
Most of us are aware of the same old security issues surrounding web-applications. XSS and CSRF attacks, SQL injection, DNS poisoning. The list of acronyms goes on. What this presentation aims at are business logic flaws, and how they’re exploited. Sometimes it doesn’t take any illegal activity to compromise an application.
Something to keep in mind.
Cheers.