And attacks using SQL injection are abundant. ... Some databases let you run command-line programs from within queries, which again can be all hackers need to do their dirty work.

Unsurprisingly enough, it turns out that Google isn't actually using its Web crawlers to perform SQL injection attacks on other people's sites. Unknown, and presumably malicious, third parties are ...