3 replies to this topic

[TT1TTONE]

Hi!

I'm new to this board and even newer to this topic, so please bare with me.


Lets say that you were running a forum with n-amount of members. The forum software had a security flaw that someone exploited by injecting SQL-queries into a badly designed form, thus getting over some sensitive data. And lets say that you had caught this someone's IP-address while he was doing so - how would/should you proceed from there on?

Most likely, he was behind some sort of proxy. Would that make any work to trace him pointless?

[serrath]

You could try for a warrant to get the records of the proxy and try to follow the breadcrumbs home.

[Seal]

I would patch the hole, inform the parties affected by the breach, and enact preventative measures to mitigate further exploitation.

[serrath]

I would patch the hole, inform the parties affected by the breach, and enact preventative measures to mitigate further exploitation.

This. Most definitely this.