3 ms·
Because a string is just a piece of data, and if your program can take it as input, then it must be handled correctly. “But writing parsers was sooo boring in
by catnaroek 10y ago
Because a string is just a piece of data, and if your program can take it as input, then it must be handled correctly.
“But writing parsers was sooo boring in college, and who has to do this in real life?”
- wongarsu 10y agoA social engineer is just taking to you, if you listen to him you must act accordingly. A lock picking set is just a bit of metal, if it fits into the keyway the lock has to handle it correctly. Yes, writing parsers is a lot easier than those examples. But so far society has always ruled that inputs that purposefully try to abuse flaws are not freed from responsibility just because the flaw shouldn't be there.
- catnaroek 10y agoA computer program is a mathematical object. If you want to rule out misbehaviors, you prove that such misbehaviors won't arise - just like any other theorem. And that's it. I'm not a malicious person. I don't purposefully abuse any system's flaws. But if anyone else does, my sympathies aren't with the designer of the flawed system. P.D.: Appeals to authority won't help make your case.