3 ms·
It's a beginner-level Rails mistake but it's very widely seen in codebases: it's a real, common threat.
by thibaut_barrere 15y ago
It's a beginner-level Rails mistake but it's very widely seen in codebases: it's a real, common threat.
- acqq 15y agoObviously not beginner-level if more famous sites suffer from the same problem -- Egor mentions some in his posts and he is only one person -- imagine what all the black hats can do working in parallel.
- Blaisorblade 15y agoBy your reasoning, since tons of C programs can't use strcpy() correctly and thus contain buffer overflows, it takes a C master to use strcpy() correctly. I'd say instead that the kind of reasoning is wrong and that even experts can make beginner-level mistakes (not so often). But these are the kind of mistakes a good framework/language/etc. should try to prevent - especially if security-related. Tons of research tries to reduce error-prone programming activities.