4 ms·
I wish I was surprised. I bet the shipping is calculated via Javascript and people with Javascript turned off get free shipping too. Intro to CS courses don't
by pkteison 15y ago
I wish I was surprised. I bet the shipping is calculated via Javascript and people with Javascript turned off get free shipping too. Intro to CS courses don't think they have enough time to get into the details of what code runs where and who and what you can trust and what encryption really does and why "oh just use https" doesn't solve everything, but it's one of the most important topics that everyone exposed to a bit of programming should know and consider. If a rewrite proxy can give your customers free stuff, it's somehow at the same time both just unforgivable yet almost expected/par for the course. I wonder how many sql injection and cross site scripting holes are in the same site.
Obligatory please-educate-yourself link: Open Web Application Security Project top 10 list: https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Proje...