Monday, April 09
Ack. Pfft.
Just doing some security enhancements. I was thinking over some new code, and I thought... Hmm, I wonder if that library does any checking... Uh oh... Well then, I'd better do some checking, but at least I'm not... I am?! Fix that, make sure it can't happen again, patch the wrapper routines, screen the user input before it gets passed to the wrapper routines (which I'd been very good about until now, but it only takes one screwup...)
Tested the whole thing against various nasties, and it passed with one small glitch, which I've corrected.
Writing code is easy; writing code that will survive when dropped unsupported into a free-fire zone is harder.
Comments are disabled.
Post is locked.
Just doing some security enhancements. I was thinking over some new code, and I thought... Hmm, I wonder if that library does any checking... Uh oh... Well then, I'd better do some checking, but at least I'm not... I am?! Fix that, make sure it can't happen again, patch the wrapper routines, screen the user input before it gets passed to the wrapper routines (which I'd been very good about until now, but it only takes one screwup...)
Tested the whole thing against various nasties, and it passed with one small glitch, which I've corrected.
Writing code is easy; writing code that will survive when dropped unsupported into a free-fire zone is harder.
- Default deny.
- Security in depth.
- Never trust user input.
- Never trust library routines to do your checking for you.
- Even if you wrote them yourself.
- Especially if you wrote them yourself.
Posted by: Pixy Misa at
03:34 AM
| Comments (1)
| Add Comment
| Trackbacks (Suck)
Post contains 141 words, total size 1 kb.
1
When in doubt, disconnect computer from net, remove to bottom drawer of locked file cabnet in disused restroom with sign on door: "Beware of Leopard."
Posted by: Old Grouch at Tuesday, April 10 2007 02:40 AM (y1GU9)
45kb generated in CPU 0.0151, elapsed 0.1004 seconds.
56 queries taking 0.0898 seconds, 327 records returned.
Powered by Minx 1.1.6c-pink.
56 queries taking 0.0898 seconds, 327 records returned.
Powered by Minx 1.1.6c-pink.
