4 ms·
I'm always amazed by what lengths random people will go to hack software. Half my developers don't even understand SQL injection attacks. There's not one of the
by ja27 18y ago
I'm always amazed by what lengths random people will go to hack software. Half my developers don't even understand SQL injection attacks. There's not one of them that really understands buffer overflows. So what chance do I have of getting a secure product out?
Those sorts of things really should be part of every programmer's education.
- mattmcknight 18y agoThis seems far simpler than SQL Injection of Buffer Overlow attacks. Why doesn't Time require some kind of registration? They could use registered users as a basis for, dare I say, "Web 2.0" features.
- potatolicious 18y agoRegistration instantly kills participation. This is a poll, not a transaction, or a subscription, or anything complicated like that - there's no reason to make it so. A captcha would have worked nicely - hassle free, commitment free (remember, most of your visitors will flee for the hills as soon as you present a registration), and tough enough to crack that most people wouldn't even try. Even if you had a script that farmed captchas all day to manual labour the effect is still relatively small.
- noodle 18y agoits similar to a really easy to perform sql injection.
- deleted 18y ago[deleted]
- noodle 18y agothey were in mine. in fact, had a whole class and (private, disconnected, secure) lab devoted to them. covered everything from your basics (buffer overflow, sql injection) to more interesting stuff (analyzing/creating/decompiling viruses). it was my favorite class. good times. i was thoroughly surprised when i started working in the "real world" and no one had any clue about what i thought was basic security practices.
- mattyb 18y agoCPSC 420? Sounds like a good class.
- ryanwaggoner 18y agoSo...where do you work? :)