News for hackers. Stuff that matters.

A comment on What I’m Telling Business People About Why Relational Databases Are So Bad.

Re:What I’m Telling Business People About Why Relational Dat... by kungtotte on Sunday June 24, 2018 @07:47AM (#17386164)
That's a whole bunch of words to say you just don't plain like relational databases.

Using SQL injection as a case against them is also fairly silly; the error there is that you don't sanitise your input. It has nothing to do where the query goes, any type of data store is vulnerable in that scenario.

[ Parent | on HN ]
Re:What I’m Telling Business People About Why Relational Dat... by vineetr on Sunday June 24, 2018 @10:50AM (#17386763)
SQL injection falls into a general class of vulnerabilities where user input escapes the data plane and get injected into the control plane. I was looking for the article to provide insight on how a new database or query+execution language would avoid this entire class of vulnerabilities, because that is what I would expect as a solution. So yeah, picking on RDBMS for SQL injection is fairly silly, and worse, it betrays ignorance on the subject.

To extend his argument, browsers are responsible for XSS.

[ Parent | on HN ]