I would like to hear what the fallout at USC was. Is anyone there criminally negligent for not have procedures in place to verify that the data protection mechanisms were effective.

How can you get ten years for typing ' or 1=1-- into a text input on a public web page? Who did this harm? If it was USC it is their own fault, it's their crack in their sidewalk.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/191/910#910