3 ms·
A lot of companies with SQL injection vulnerabilities remediated them by buying security appliances advertised to stop SQL injection attacks. That works for a
by barryrandall 2y ago
A lot of companies with SQL injection vulnerabilities remediated them by buying security appliances advertised to stop SQL injection attacks. That works for a while until time and turnover result in someone optimizing the appliance out of the stack. Then the cycle repeats.
- jiggawatts 2y agoThose things are digital snake oil. If you turn on the web application firewall (WAF) features your app breaks. If you “tune” it to fix that, you let the attackers back through. You can’t use a dumb appliance to fix developer stupidity.
- barryrandall 2y agoThat doesn’t stop businesses from falling for the sales pitch.
- bigiain 2y agoOr auditors from ticking that box.