2 ms·
hey, with web sockets I am a noob. I'm generally quite ok with internet security as a concept, but I was massively naive in my implementation here, and one very
by g105b 5y ago
hey, with web sockets I am a noob. I'm generally quite ok with internet security as a concept, but I was massively naive in my implementation here, and one very obvious vulnerability in my code was allowing to store anything the connection received, rather than forcing to just a single character. It tempted someone to upload binary content. After only a few minutes, the server was full of random binary data. Curious, I inspected the content, and after finding a massive dump of illegal content I thought it was best to turn off the server for a bit while I think about improvements to the code and wash my eyes out.