3 ms·
I like the 2008 winner most [1], especially because it is so simple and can happen to anyone but also very easy to overlook. And most other entries could have b
by lifthrasiir 3y ago
I like the 2008 winner most [1], especially because it is so simple and can happen to anyone but also very easy to overlook. And most other entries could have been prevented in other languages, this one isn't.
[1] http://www.underhanded-c.org/_page_id_17.html http://www.underhanded-c.org/_page_id_17.html
- pests 3y agoI am bad at C, how is he doing multiples of 0 based on the intensity?
- phreack 3y agoTook me a bit but they're replacing the string characters which are numbers with '0' and keeping the rest. So "3 102 45" becomes "0 000 00". Once I got it I thought it was brilliant.
- jancsika 3y agoSuch a great cover for the bug: the simplicity of the approach doesn't require reallocation. Also, the author could claim they inspected/analyzed the visual output and the redaction appeared flawless. At least, I assume most image viewers won't display a dialog: Warning: suspiciously redundant image data detected. If any part of this image is supposed to be redacted, please contact your system administrator immediately.
- pests 3y agoOhhh! That's also how it perserves some intensity information as well!