This goes to show the poor quality of coders in the Government more than weaknesses in ColdFusion. Same for SysAdmins that fail to follow the lock down procedures. Any web application can be poorly written and any server can be poorly administered.
Wil Genovese Sr. Web Application Developer/ Systems Administrator CF Webtools www.cfwebtools.com [email protected] www.trunkful.com On Feb 7, 2013, at 12:33 PM, Russ Michaels <[email protected]> wrote: > > some more great publicity for Adobe/CF > > > On Thu, Feb 7, 2013 at 6:24 PM, Che Vilnonis <[email protected]> wrote: > >> >> With all of the talk of CF & security I thought I'd pass this along. >> According to Chris Wysopal of VeraCode, the site was running Coldfusion. >> >> >> https://www.veracode.com/blog/2013/02/stolen-data-headers-from-the-federal-r >> eserve-hack/ >> >> >> http://www.huffingtonpost.com/2013/02/05/federal-reserve-security-breach_n_2 >> 622698.html >> >> >> >> > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354352 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

