NASA websites hacked

Two websites belonging to NASA's Instrument Systems and Technology unit and Software Engineering division were hacked using SQL Injection flaws and poor access controls.

A hacker named "c0de.breaker" posted screenshots showing the whole operation along with other information on his blog entry Nasa.gov Full Access. He explained his only motive was to show NASA websites are vulnerable. The hacker says he didn't change anything and instead just hopes his actions force the agency to make the sites secure. Gunter Ollmann, an Internet security specialist, said, "Any script-kiddie can walk in there and start adding their favorite drive-by download exploits as it stands." As the Register notes, recalling the example of Gary McKinnon, hacking into U.S. agency websites is a risky business.