CGISecurity Logo

Lessons Learned from Time’s Most Influencial Poll Abuse: Part 1

"In a text book case of web applications being abused due to insufficient anti-automation defenses, the Time Magazine's Internet poll of the most influential 100 people was bombarded with various methods to manipulate the results.  The WASC Web Hacking Incident Database
provides a great overview of the various tactics that Moot supporters
used to influence the poll results.  In this installment, we are going
to focus on the CSRF attack vectors employed by Moot's supporters."

Read more: http://tacticalwebappsec.blogspot.com/2009/05/lessons-learned-from-times-most.html