YouTube
The classic website attack, explained as a trick of language rather than wizardry. Tom Scott shows how a site that pastes whatever you type straight into its database query can be fooled into running your words as commands, letting an attacker read or wipe data through an ordinary login box. His…