🎉 Celebrating 25 Years of GameDev.net! 🎉

Not many can claim 25 years on the Internet! Join us in celebrating this milestone. Learn more about our history, and thank you for being a part of our community!

Hack-proof website, why not?

Started by
93 comments, last by ronan.thibaudau 8 years, 9 months ago

Taking a brief break and looking through the news headlines... and yet another big company's website has been hacked, with customer data scare

TalkTalk cyber-attack: Website hit by 'significant' breach

Talk Talk 'significant breach' could affect all customers

TalkTalk cyber-attack: Boss 'receives ransom email'

Is it that difficult for companies earning hundreds of millions £££s to fence their systems to a hack-proof state? Some don't even auto-encrypt data

Or are cyber-hackers - backed with sustained DDoS attack - just damn too smart?

can't help being grumpy...

Just need to let some steam out, so my head doesn't explode...

Advertisement
Having a lot of money doesn't help when hackers discover vulnerabilities before everyone else.

It's almost impossible to do that.

Our company has roughly 4 million~ lines of code running on various applications.

We had Russian hackers exploit a vulnerability in our server host's hosting panel and load down a bitcoin miner a while back.

So basically if it's made by man, it will be hacked by man.

All hail quantum cryptography!

Beginner in Game Development?  Read here. And read here.

 

Why so many people think big amounts of $$$ equals being a God?

Thinking a company can make an unhackable website because they have loads of cash is pretty much the same as thinking their CEOs become immortal and immune to diseases because they have a lot of money.

Yes, some huge companies are penny-pinching on security, or have no clue in hiring actually good security developers; which result in jaw dropping vulnerabilities like storing passwords in plain text in their databases, or not using encryption.

But cheapskate and incompetent companies aside (and boy, there's a lot of them), having lots of money doesn't make it easier on making hack-proof websites.

Security is a cost-center, not a profit center.

Eric Richards

SlimDX tutorials - http://www.richardssoftware.net/

Twitter - @EricRichards22

Taking a brief break and looking through the news headlines... and yet another big company's website has been hacked, with customer data scare

TalkTalk cyber-attack: Website hit by 'significant' breach

Talk Talk 'significant breach' could affect all customers

TalkTalk cyber-attack: Boss 'receives ransom email'

Is it that difficult for companies earning hundreds of millions £££s to fence their systems to a hack-proof state? Some don't even auto-encrypt data
Or are cyber-hackers - backed with sustained DDoS attack - just damn too smart?


Complex software will always have bugs, some bugs can be exploited by malicious users, it is just a fact of life.

The only way to write hack proof software is to stop at hello world (but even then you might still fall victim to security flaws in software other people have written (such as your OS, compiler, vm, etc)
[size="1"]I don't suffer from insanity, I'm enjoying every minute of it.
The voices in my head may not be real, but they have some good ideas!
Maybe all OSes should be written in Lisp and just have the code write its own code. Look ma. No mistakes.

Beginner in Game Development?  Read here. And read here.

 

Why so many people think big amounts of $$$ equals being a God?

Cus we r 2dumb to nobiggrin.png

Thinking a company can make an unhackable website because they have loads of cash is pretty much the same as thinking their CEOs become immortal and immune to diseases because they have a lot of money.

Complex software will always have bugs, some bugs can be exploited by malicious users

Seriously, I think hackers are simply more dedicated to their job than security professionals.

Big companies are very complacent. The medicine is TEST, TEST, TEST AND TEST. If possible hire former professional hackers.

Complacent and penny-pinching This sums it up

Security is a cost-center, not a profit center.

can't help being grumpy...

Just need to let some steam out, so my head doesn't explode...

Complex software will always have bugs, some bugs can be exploited by malicious users

Seriously, I think hackers are simply more dedicated to their job than security professionals.

Big companies are very complacent. The medicine is TEST, TEST, TEST AND TEST. If possible hire former professional hackers.

Complacent and penny-pinching This sums it up

It's just easier to be robber than cop. Hacker have all the advantages and even when they fail it's just no news. But if site fail then its big news. Hackers can also pick the lowest hanging fruits.(worst secured sites)

This topic is closed to new replies.

Advertisement