Can someone clarify exactly what and from whom was stolen?
Line 30:
"In reality, for the past few months, we have been in possession
of approximately 14,000 passwords and 8000 credit cards from
SpecialForces.com."
Line 36-37: "http://[redacted].gz <- orders/addresses/ccs
http://[redacted].txt <- just the passwords"The title is a bit misleading, the site had a "Secured by GoDaddy" logo on it, because the site had purchased its SSL certificate from GoDaddy and they throw the security logo thing in for free.
EDIT: My bad. They also paid the $4.99/month for the "Hacker Safe" logo.
http://www.godaddy.com/security/website-security.aspx
Under the "Common Threats" tab, they claim to find "spyware, back doors, SQL injection opportunities and cross-site scripting (XSS) holes".
They also imply that they check input fields "properly", since "When fields aren't checked properly, hackers can insert code that exposes everything in your database."