2 ms·
Exactly. Although I believe SBO does work, this is simply not the case for using it.
by chicob 9y ago
Exactly.
Although I believe SBO does work, this is simply not the case for using it.
- dsfyu404ed 9y agoSBO buys time. "POSTing a script that looks like a custom FORTRAN-esque language" probably sounds a lot like "slower than expected progress" in Russian. All cyber-security is just a way of buying time. Depth is king. The attacker must be made to fight for every inch. However long it takes a new hire to be able to do useful things is about how long it takes an attacker to do useful things without being bull in a China shop loud about it (this is also why key rotation is important). Good attackers deserve credit though. They have to understand stacks that most of HN would just wrap and treat as a black box (and then pull their hair out wondering why their JS app breaks on edge cases).