Fergie's Tech Blog

Astroglide Website Helps Hackers Insert Rogue Code, Reader Reports

Ryan Singel writes on Threat Level:

Just last week BioFilm, the maker of the popular sexual lubricant Astroglide, confirmed that it had failed to properly secure the names and addresses of more than 250,000 individuals who requested free samples which resulted in those files showing up in a Google search for those individuals' names.

Now THREAT LEVEL reader Ronald van den Heetkamp reports that he found that the Astroglide website is vulnerable to SQL injections, a potentially much more serious threat to Astroglide customer privacy than not keeping names and addresses where Google can find them.

posted by Fergie @ 4/30/2007 05:06:00 PM