3 ms·
By "services like this", I hope you mean websites that are vulnerable to SQL injection, and not Hurl itself? Hoping that an attacker can't use curl probably is
by tomblomfield 15y ago
By "services like this", I hope you mean websites that are vulnerable to SQL injection, and not Hurl itself?
Hoping that an attacker can't use curl probably isn't a good security solution...
- WA 15y agoYes, not Hurl itself. But Hurl can be used to execute malicious statements. It is a difference, whether an attacker uses his own IP address (or a setup with various VPNs and proxies) or uses Hurl for it so that the target website sees only Hurl's IP in its logs. In times of free WiFi, the traceability of malicious requests is definitely reduced anyway, but Hurl could potentially add another layer that can be used by an attacker to obscure his/her origin. I'm not saying that this is a major security issue, it is just a flaw by design, which I wanted to point out.
- ay 15y agoDo you happen to know how translate.google.com deals with this problem ?