2 ms·
Being connected to the internet is a security hole. I'll balance security with practicality.
by xapata 10y ago
Being connected to the internet is a security hole. I'll balance security with practicality.
- ludamad 10y agoThe GP's point is if you're doing code deserialization, the definition of security is different. The data format having RCE bugs won't be as much of a concern, while trusting the data source will be much more of a concern.
- xapata 10y agoWe redefine security for every project. Some projects can (de)serialize code and be secure. Others can't.