opoka

4 ms·

1. 1.▲
   by opoka 8mo ago

   The 88% figure isn't failure rate in normal operation — it's the Interface Hazard rate when ORMs fail. You're correct that ORMs work correctly 99.9% of the time. That's exactly the point. The paper argues that "corr
2. 2.▲
   The Hazardous Interface: SQL Injection Is a Protocol Defect (2026) [pdf](github.com)

   3 points by opoka 8mo ago|3 comments
3. 3.▲
   by opoka 8mo ago

   Hi HN. We analyzed 1,374 CVEs across MySQL, PostgreSQL, MariaDB, MongoDB, and SQLite. Key findings: - Interface Hazards (design-transferred risks) outnumber Implementation Defects 3:1 - 79% of SQL injection occurs downstream of the database