3 ms·
Getting this stuff right is hard. Don't be a hater. Just because the attack vector looks simple doesn't mean the bug was obvious.
by phillmv 14y ago
Getting this stuff right is hard. Don't be a hater.
Just because the attack vector looks simple doesn't mean the bug was obvious.
- 16s 14y agoI agree. Postgres is one of the most well thought out DBs I've ever used. They are slow to add features but when they do, they are done right with lot's of attention to detail. Everyone makes mistakes.
- gcr 14y agoAbsolutely. Remember the MySQL authentication bypass vulnerability¹, where a blank password would succeed to authenticate 1/255th of the time? This reminds me of that. 1: http://thehackernews.com/2012/06/cve-2012-2122-serious-mysql.html http://thehackernews.com/2012/06/cve-2012-2122-serious-mysql...