Comments on: PnCHd (Pinched) http://www.computerdefense.org/2006/08/pnchd-pinched/ Sharing my thoughts with the world. Wed, 16 Nov 2011 02:58:20 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: .:Computer Defense:. » Custom Applications — Devil Spawn or Heavenly Addition http://www.computerdefense.org/2006/08/pnchd-pinched/comment-page-1/#comment-92 .:Computer Defense:. » Custom Applications — Devil Spawn or Heavenly Addition Sat, 07 Oct 2006 05:27:39 +0000 http://www.computerdefense.org/?p=70#comment-92 [...] Other people run the  “commercial” software… I think this is key… Yeah your site may be pinched via some unknown 0-day but that can happen with custom software as well… A generic XSS/SQL Inject tool… a Protocol fuzzer…. someone who stumbled upon your site and wanted to test the security of it… However lets say you develop “CDO Shopping Cart”… You’re 100% of the user base… However, if you take something like x-cart, plenty of people are using it… you may be 0.01% of the user base… The odds are someone else will be attacked instead of you…. Yes the odds also say that it’s more likely someone will look for a flaw in that software but personally thats a risk I’d be willing to take…. [...] [...] Other people run the  “commercial” software… I think this is key… Yeah your site may be pinched via some unknown 0-day but that can happen with custom software as well… A generic XSS/SQL Inject tool… a Protocol fuzzer…. someone who stumbled upon your site and wanted to test the security of it… However lets say you develop “CDO Shopping Cart”… You’re 100% of the user base… However, if you take something like x-cart, plenty of people are using it… you may be 0.01% of the user base… The odds are someone else will be attacked instead of you…. Yes the odds also say that it’s more likely someone will look for a flaw in that software but personally thats a risk I’d be willing to take…. [...]

]]> By: Digged Stories » Blog Archive » PnCHd (Pinched) http://www.computerdefense.org/2006/08/pnchd-pinched/comment-page-1/#comment-14 Digged Stories » Blog Archive » PnCHd (Pinched) Sat, 19 Aug 2006 02:15:27 +0000 http://www.computerdefense.org/?p=70#comment-14 [...] read more | digg story [...] [...] read more | digg story [...]

]]>