Perhaps Companies House should put some canaries in their data to trigger such these SQL injections in a non-destructive way. That way they might accomplish some good by forcing these companies to fix their shit.
Regardless, anyone affected by a "bobby tables" should be thankful it was that, and not hackers exfiltrating their data and selling it.
This is a great idea though done naively could cause unintended side effects. But key to the consideration today (and as pointed out by the commenter in TFA) is that not just SQL would need to be considered, especially in the dawn of the LLM era.
Comments
Perhaps Companies House should put some canaries in their data to trigger such these SQL injections in a non-destructive way. That way they might accomplish some good by forcing these companies to fix their shit.
Regardless, anyone affected by a "bobby tables" should be thankful it was that, and not hackers exfiltrating their data and selling it.
This is a great idea though done naively could cause unintended side effects. But key to the consideration today (and as pointed out by the commenter in TFA) is that not just SQL would need to be considered, especially in the dawn of the LLM era.