19 Responses to “Telegraph.co.uk hacked – when will they learn?”

1. David Says:
   May 29th, 2009 at 12:35 am

   I already noticed with my own experience some big companies discarding huge security leaks. Well…

2. Blackie Says:
   May 29th, 2009 at 12:36 am

   )))

3. virjil Says:
   May 29th, 2009 at 12:50 am

   hhahahahhahahahashahahhahahahahahhahahahhhahahahah: )))))))))))) =)))))))) )) =))))

4. fanfan Says:
   May 29th, 2009 at 12:53 am

   lol hahahahahahhahaha ))))))))))))))))))))))))

5. virjil Says:
   May 29th, 2009 at 1:01 am

   

6. Blackie Says:
   May 29th, 2009 at 1:50 am

   Tabela cu emailurile pt newsletter nu se afla pe acolo(din ce cautai eu), so ghinion spammeri!
   In schimb, se gasesc foarte multe databases-uri, iar cineva rauvoitor ar putea face mult rau.
   Sa speram ca “specialistii” englezi vor remedia rapid vulnerabilitatea.

7. Jay Says:
   May 29th, 2009 at 2:55 am

   I know the company who produced this lousy website… they well deserve these problems because of their attitude and development habits/management.

8. Jay Says:
   May 29th, 2009 at 3:05 am

   I suspect that the data you see is not related to Telegraph itself. It may well be that this domain (stats.telegraph.co.uk) is provided by the company I mentioned earlier but the data in the database relates to other projects of that company rather than Telegraph itself.

9. 2fingers Says:
   May 29th, 2009 at 3:14 am

   It’s the main database of the Telepgraph according to unu. They have everything in there, probably beta (or other) projects too.

10. Jay Says:
    May 29th, 2009 at 4:19 am

    Hmm I doubt it however I do not argue it cannot be true. The DB names you’ve listed are clients of the company responsible for the vulnerability. Seems to me that this subdomain provides some iframes for Telegraph along with other websites (hence those other DB databases listed) for the company responsible.
    If you contacted Telegraph, would you mind describing what was their response this time?

11. keane Says:
    May 29th, 2009 at 12:12 pm

    Hi Jay,

    I came across this thread and would like to discuss this with you in a bit more detail if you dont mind?

    I work with both the Telegraph and the 3d party company i beleive you are referring. It would be good to understand the issue and see if there is anything i/we can do to resolve the issue.

    Please contact me on dkhendy509@hotmail.co.uk

    Thanks

12. Pyro Says:
    May 29th, 2009 at 1:09 pm

    Urmeaza a 3 oara? (cica e cu noroc atunci) =))

13. Alexu` Says:
    May 29th, 2009 at 1:10 pm

    Good job unu and HB !

14. Jay Says:
    May 29th, 2009 at 1:34 pm

    Can you confirm they’ve fixed the problem now? And I stand behind my claim that it doesn’t contain Telegraph’s own user data.

15. Blackie Says:
    May 29th, 2009 at 2:04 pm

    Se pare ca au rezolvat problema.
    Unu, asteptam a treia buba.

16. unu Says:
    May 29th, 2009 at 3:11 pm

    Jay…1. If you read the article carefully, you noticed that I did mention I wrote them emails but to no avail. I asked to speak to someone in their IT dept. ( I even wrote to Paul Cheesbrough) and still got no answer
    2. In vain you still hope that the injection didnt give full access to users data on the site. I have to dissapoint you. DB5_data it the main data base. The one that has all the data of the users. Accessing this DB you can access the clients. If you look closely, you can see in the the first article on hackersblog http://www.hackersblog.org/2009/03/06/telegraphcouk-hacked-sql-injection/) that DB5_data is the name of one of those databases. That same database is circled in the image in this article.If that database belonged to the Telegraph back then, I dont see how it could belong to someone else now. Especially since we talk about a subdomain of telegraph.co.uk.

17. keane Says:
    May 29th, 2009 at 4:01 pm

    Hi Guys

    It seems you guys have been looking further into this. I am unsure at what capacity however i am now in contact with the Telegraph so would be greatful to have your insight into the situation and maybe look to recruit your expertise to resolve it, as they are keen to sort this asap.

    Please do contact me dkhendy509@hotmail.co.uk

    Thanks,
    Daniel

18. Эпидемия уязвимостей на британских сайтах - Персональный блог Вороны Богдана Says:
    June 3rd, 2009 at 6:54 am

    [...] одновременно с отчетом XSSed сайт HackersBlog опубликовал детали уязвимости к SQL-инъекциям, которую команда его хакеров обнаружила [...]

19. David Says:
    June 4th, 2009 at 12:54 am

    Did they reply already??

Leave a Reply