4 ms·
> As a security person... oh, no no no no. As a non-security person, I don’t understand how anyone with the most rudimentary understanding of computers can thi
by klabb3 4y ago
> As a security person... oh, no no no no.
As a non-security person, I don’t understand how anyone with the most rudimentary understanding of computers can think that you can get a hardened security boundary by explaining the boundaries to the computer in English and then _concatenating_ that with untrusted input. I wouldn’t even know where to begin such an argument. “Have you heard of adversarial games? Social engineering? Are you aware that human language is ambiguous?”