4 ms·
What has not been mentioned at all: how C++ webapps will spell the end of XSS and SQL injection as hackers refocus on the much more interesing but almost-forgot
by brazzy 17y ago
What has not been mentioned at all: how C++ webapps will spell the end of XSS and SQL injection as hackers refocus on the much more interesing but almost-forgotten buffer overflow vulnerabilities.
Oh joy!
- coliveira 17y agoSuch vulnerabilities still exist in PHP, Python and Ruby, because they are written in C. And they are much easier to exploit because almost every web app uses one of these languages.
- jbarham 17y agoNonsense. Just because the Python interpreter is written in C does not mean that you can overrun Python strings and smash the stack like you can w/ C strings.
- alnayyir 17y agoI smack my lips in expectation of the usage of gets() in web apps.
- coliveira 17y agoIts not just strings, all kinds of data structures are vulnerable. See: http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_...