Breaking the web software
Ethical Hacker Network published an excerpt from “How to break web software” book and it’s quite an interesting reading, makes me want to buy the whole book. I’ve just read half of it (the chapter) and somehow, makes me feel insecure hehe cuz I often use hidden fields in my programming but of course not to store sensitive stuff.
They’re just shortcuts and true to what the book says, it is security by obscurity, hoping the cracker won’t see the “shortcut”.
Of course they can’t replace the page but they can change the price of a product for example if it’s an e-commerce site.
Gosh.. have to re-think the way my code should work.



