joesb · HackerTrans

2 lata temudiscuss

Either the package does or the developers do. And only one of them has compilation checks.

2 lata temudiscuss

And what does DOS attacker want you to do? Not crashing the whole service to deny others of the service?

2 lata temudiscuss

When a process is used to serve multiple requests, I don't think you need to let the whole process terminate just because there is a bug dealing with a single request. Just because we can not reason about the current request does not mean the only way to get to the clean state for other requests is to terminate the whole process.

joesb

2 lata temudiscuss

[flagged]

joesb

8 lat temudiscuss

> "I threw the code together in minutes and was too lazy to spend another couple minutes figuring out POST."

So it's not the vendor's problem then. They provide you with two ways to make a request. You have a choice to do it right, you didn't.

comments