News for hackers. Stuff that matters.

A comment on Neighbor's house alarm triggers when I put my car in reverse. Parent comment

Re:Neighbor's house alarm triggers when I put my car in reverse by infogulch on Monday December 18, 2017 @10:20AM (#15952187)
I would take a different lesson: use internally generated ids, not user generated usernames when communicating between services in your backend.
[ Parent | on HN ]
Re:Neighbor's house alarm triggers when I put my car in reverse by mabbo on Monday December 18, 2017 @10:35AM (#15952279)
Well technically, the username the user had was generated by us when we signed them up. I honestly think this issue probably would have presented for 1/10 users whose IDs happened to have a leading 0-digit. Our software couldn't handle a situation we had setup for it.

But yes, I do agree with the general sentiment of "communicate via something internal, not something user-supplied".

[ Parent | on HN ]