Drop Table Political Action Committee | Hacker News Reader

Drop Table Political Action Committee

docquery.fec.gov

95 pointsseanherron16 comments

Open articleView on HN

From the PDF filing linked: "A SuperPAC devoted to raising awareness of SQL injections."

http://docquery.fec.gov/pdf/964/15951210964/15951210964.pdf

It should've been named "'; DROP TABLE committees;". Way to fail at SQL injections :)

The bad characters may have been stripped

Good to know their SQL sanitization is working...

At least the government contractors did their SQL correctly!

Probably not... knowing how that code gets written, the correct table was probably called "tbl_cmmts"

Meh. Needs more cynicism.

Knowing the government, the data from a web form is faxed to an office where someone retypes it into an IBM AS/400 mainframe green-screen by hand, omitting the ');

As a former government contractor...I find this quite surprising. It's hard to find decent government contractors and even then it's usually just a few teams versus a whole company.

For those who didn't get the reference: https://xkcd.com/327/

Also see Sweden [1], previous discussion on HN [2]

[1] http://alicebobandmallory.com/articles/2010/09/23/did-little... [2] https://news.ycombinator.com/item?id=1721494

Little Bobby Tables grew up and started a PAC!

Someone should create a <script>alert('PAC')</script>

MapLight is a pretty cool org. I wonder if this was something they purposefully did or an employee going rogue.

Good question. Mr. Shah did use his maplight email address, but not the maplight street address.

http://docquery.fec.gov/pdf/964/15951210964/15951210964.pdf

I wish it would work. I can't believe just two people are going to drop $900M on a single election through PACs.

While I'm sure the Koch brothers will spend a large sum, the $900m isn't going to come from just them, that's the total goal of their political network, to be sourced from hundreds or thousands of donors. Their network spent nearly $400m during the 2012 elections.

Reply on news.ycombinator.com