Cross-site Request Forgery - History

History

CSRF vulnerabilities have been known and in some cases exploited since 2001. Because it is carried out from the user's IP address, some website logs might not have evidence of CSRF. Exploits are under-reported, at least publicly, and as of 2007 there are few well-documented examples. About 18 million users of eBay's Internet Auction Co. at Auction.co.kr in Korea lost personal information in February 2008. Customers of a bank in Mexico were attacked in early 2008 with an image tag in email. The link in the image tag changed the DNS entry for the bank in their ADSL router to point to a malicious website impersonating the bank.

Read more about this topic:  Cross-site Request Forgery

Famous quotes containing the word history:

    “If man is reduced to being nothing but a character in history, he has no other choice but to subside into the sound and fury of a completely irrational history or to endow history with the form of human reason.”
    —Albert Camus (1913–1960)

    “This is the greatest week in the history of the world since the Creation, because as a result of what happened in this week, the world is bigger, infinitely.”
    —Richard M. Nixon (1913–1995)

    “There is no example in history of a revolutionary movement involving such gigantic masses being so bloodless.”
    —Leon Trotsky (1879–1940)