Cross-site Request Forgery - History

History

CSRF vulnerabilities have been known and in some cases exploited since 2001. Because it is carried out from the user's IP address, some website logs might not have evidence of CSRF. Exploits are under-reported, at least publicly, and as of 2007 there are few well-documented examples. About 18 million users of eBay's Internet Auction Co. at Auction.co.kr in Korea lost personal information in February 2008. Customers of a bank in Mexico were attacked in early 2008 with an image tag in email. The link in the image tag changed the DNS entry for the bank in their ADSL router to point to a malicious website impersonating the bank.

Read more about this topic:  Cross-site Request Forgery

Famous quotes containing the word history:

    To a surprising extent the war-lords in shining armour, the apostles of the martial virtues, tend not to die fighting when the time comes. History is full of ignominious getaways by the great and famous.
    George Orwell (1903–1950)

    I am not a literary man.... I am a man of science, and I am interested in that branch of Anthropology which deals with the history of human speech.
    —J.A.H. (James Augustus Henry)

    Tell me of the height of the mountains of the moon, or of the diameter of space, and I may believe you, but of the secret history of the Almighty, and I shall pronounce thee mad.
    Henry David Thoreau (1817–1862)