[citation][nom]830hobbes[/nom]How can sql injection work against real tech companies?! Also, why the hell don't the hash and salt people's passwords? It's insane that the tiny, shitty site I run has better security than yahoo...[/citation]
Lack of respect for personal information from its users is the issue, they simply don't take the data they amassed seriously . I hope FBI or wherever agency is investigating ALSO investigates Yahoo if they took adequate measures to protect the data from its users or if it was negligence, a simple SQL injection sure sounds like it!