“No web site is 100% safe. There is always some weakness.” Interesting look into three Chinese hackers who make their living hacking U.S. government and military websites and who allegedly have been able to download “sensitive” information. This video interview from CNN is a chilling look into three young men who know their craft well.
http://cosmos.bcst.yahoo.com/ver/256.0/popup/index.php?cl=6935651
What you can do about it:
Defend against parameter tampering
Countermeasures for web application input attacks
Identify vulnerabilities with web application scanning tools
The bigger picture: