Symantec pops some caps in Snoop Dog website

INSECURITY VENDOR Symantec's competition Hackiswack website has been patched for security vulnerabilities after having been forced to close.

Or, in street talk armed only with our sick rhymin' jive, Hackiswack was whack and prone to hack. Respeck.

The Inquirer reported how security vendor Symantec had teamed up with US rapper Snoop Dog to carry the message that hacking is bad for the hood. The Symantec competition website was running to take rap lyrics entries from geek homeboys showing off their on-message Symantec marketeering skillz. Naturally, our entry was the best by far.

But online rumours blazed up that the website had more security holes than swiss cheese. Security researcher Mike Bailey blogged that the Symantec competition website was vulnerable to exploitation. Oops. Doh.

"The Hack is Wack site is chock full of holes. For example, there's the publicly available, indexed cache directory with all that SQL, JSON and other data," he said.

"There's the XSS vulns (HTML5 only, though it should be simple enough to rewrite), CSRF holes, and the Flash upload issues in the video upload script."

But Symantec popped some caps, well, patched the holes, so the website is up and running again. We asked the company "what gives" and received a relatively generic statement on the issue.

"There are reports of vulnerabilities to a Norton microsite. Symantec is aware of the situation and we're taking the necessary steps to enhance security on the site. We have found no evidence to date that any intrusion into the site or other areas of Symantec's network or website have occurred," replied an unattributed spokesperson.

"To date, Symantec can confirm that no company or customer data has been compromised or exposed. Symantec takes the security of our website and microsites very seriously and are taking the necessary steps to resolve this issue."

Word up, dawg. [Pull your pants up and rebuckle your belt now, Spencer. - Ed] µ