3 ms·
What do you do with the uploaded images? You could be exposed to risks that may not be immediately obvious. I have seen a team struggle for over a month to eli
by JohnCClarke 2y ago
What do you do with the uploaded images? You could be exposed to risks that may not be immediately obvious.
I have seen a team struggle for over a month to eliminate NSFW content - avatars - uploaded by a user that lead to their site being demonetised.
- PaulHoule 2y agoI had a site demonetized because about 1 in 10,000 pictures were of deformed penises, dead nazis, things like that.
- samus 2y agoI think these days you'd have to deploy an NSFW detector model. And you'd have to silently reject the upload* and limit profile picture change rate, else the attacker could use the endpoint as an oracle to build an adversarial model, which can eventually generate inputs that the detector won't flag. *: act as if successful, including processing time, but throw away the upload