 |
| from here and here |
It's hard to believe, but the year is 2023 and people are still creating products with SQL injection vulnerabilities. I can only guess that the Q in QNAP doesn't stand for quality. It might stand for quick, because that's how fast you can get pwned with a vulnerability like that.
 |
| Product Page |
This is one of the stickers nominated for a DEFCON Award. Check out the rest and see which one you like best.
 |
| from here |
Y'know, it never occurred to me that you could hack an election with a pen and some paper. That is an impressive display of thinking outside the box. It seems the pen is mightier than the code (or at least it can be if you don't sanitize your inputs).
That being said, can you imagine the problems it would have caused if the SQL injection against a live election had worked? Holy cow, someone was playing a very risky game.