joesb · HackerTrans

Either the package does or the developers do. And only one of them has compilation checks.

And what does DOS attacker want you to do? Not crashing the whole service to deny others of the service?

When a process is used to serve multiple requests, I don't think you need to let the whole process terminate just because there is a bug dealing with a single request. Just because we can not reason about the current request does not mean the only way to get to the clean state for other requests is to terminate the whole process.

joesb

2년 전discuss

[flagged]

joesb

8년 전discuss

> "I threw the code together in minutes and was too lazy to spend another couple minutes figuring out POST."

So it's not the vendor's problem then. They provide you with two ways to make a request. You have a choice to do it right, you didn't.

comments