Hello, could someone explain or help me on how porn accounts are hacked? thank you
[Paste your content here. Remove this line and one below!]
[DO NOT PASTE THE CONTENT ABOVE OR BELOW THE REPLY QUOTES]
Sites employ CAPTCHA's to stop brute forcing, use login velocity limiting as well (in case the CAPTCHA is cracked), IP banning, and username locking. Most will use IP detection per username, so, if the same username is being used from multiple countries in the same time period, the account is suspended.
Forms will be immune from SQL injection and similar privilege escalation techniques. Attack surface is reduced by SSH and SFTP limited to specific (unusual) ports, limited to specific IP's, SSL certs required for admin areas, regularly updated (and inherently secure) LAMP stack, and similar approaches, reducing or completely dis-allowing cross-site scripting (in fact, limiting use of third part JS entirely).
But perhaps most importantly, developers are coached to Maintain a security mindset (that's one of our Principles of Web Development), cos as Bruce Schneier said,Some sites pay a bounty for identifying security flaws so it may be a better use of your time.