4 ms·
Worth of mentioning: during the earliest years of Facebook, some guy managed to hack in and expose some source code. When they did, everybody was like "oh, how
by tacone 11y ago
Worth of mentioning: during the earliest years of Facebook, some guy managed to hack in and expose some source code.
When they did, everybody was like "oh, how can such crappy code power a successful service like that?"
Security is very important, but totally unrelated to good business sense. :)
- plugnburn 11y agoIt's related to the intentions this guy had in his head. If someone would find this vulnerability in Updrop after plenty of files were uploaded and the service became popular, compromising the security with any evil intention would bring a disaster. Now that PHP file uploading is already closed both at the client and server sides, it became relatively safe to operate. Although, until filename(1), (2) etc issue is fixed, this service isn't worth any serious consideration anyway. Too many newbie mistakes here. Update: this seems to be fixed too for now (not a perfect variant, as the original name is lost forever, but a plausible solution that's much better than it was). Nice!
- devbob 11y agoHey, I appreciate your vigilance, thanks