A hacker named rEmOtEr hacked Microsoft.uk, the attack was made via SQL Injection and the hacker recorded two videos showing the process of two different hacks.
"Roger Halbheer, chief security advisor for Microsoft in Europe, the Middle East and Africa admitted that the hack was successful and revealed that the whole event was unfortunate. According to Microsoft, no sensitive information was compromised in the attack. This is a clear indication that the hack was done for show, rather than to actually cause any harm. Another argument that supports such a scenario is the fact that rEmOtEr took time to document the hack in two separate video fragments. You will be able to watch for yourselves the live hacking via the two "remoter_vs_microsoft.avi" files.
The hack was possible mainly because of the fact that the database was allowed to return error messages explained Halbheer, as cited by InfoWorld. The attack was possible through a technique referred to as SQL injection. This fact is also confirmed by the hacker in the two videos that were made available. Via Structured Query Language injection rEmOtEr was able to gain access to the database. In the video fragments you will be able to see how easy the hacker obtains both usernames and passwords for the database. Working his way from error message to error message, rEmOtEr finally could switch from SQL queries with an unexpected form to direct instructions to the database."
I uploaded the videos on several file sharing services (in case some sites won't work for you -- 863 kB RAR archive only and extracts into 111 MB AVI files).
Its really funny and he makes it look so easy :P
Download from RapidShare
Download from SendSpace
Download from MegaUpload
Download from UnBase
Download from AxiFile
Download from Upitus
Enjoy ;)
