News for hackers. Stuff that matters.

A comment on Exploiting URL Parser in Programming Languages (2017) [pdf]. Parent comment

Re:Exploiting URL Parser in Programming Languages (2017) [pdf] by Kalium on Tuesday September 11, 2018 @03:51AM (#17957877)
Very true! Firewall rules with a strict filter could contain this!

Of course, that assumes you're not doing something like running in AWS and using the AWS firewall. And that your firewall never has any issues at all.

In general, defense in depth is a preferable strategy. Your entire defense should never be reliant upon a single control.

[ Parent | on HN ]
Re:Exploiting URL Parser in Programming Languages (2017) [pdf] by jsjohnst on Tuesday September 11, 2018 @08:22AM (#17959027)
> Your entire defense should never be reliant upon a single control.

Exactly why I used “to some extent” as a suffix to the statement. One tool alone doesn’t necessarily make you safe, but it might be enough for practical purposes depending on your risk profile.

[ Parent | on HN ]