News for hackers. Stuff that matters.

A comment on Dangers of CSV Injection. Parent comment

Re:Dangers of CSV Injection by fulafel on Tuesday October 10, 2017 @11:55PM (#15447162)
Users associate application behaviour with file formats.

Analogy: people think PDF files are safe, but aren't aware of the constant stream of RCE vulnerabilities that is Acrobat Reader & how widely it's used, which invalidates their model of behaviour associated with PDF files.

[ Parent | on HN ]
Re:Dangers of CSV Injection by mulmen on Wednesday October 11, 2017 @12:39AM (#15447332)
In this case the users are wrong and so are the spreadsheet applications.
[ Parent | on HN ]