News for hackers. Stuff that matters.

A comment on Zero-day in jQuery plugin sample code exploited for at least three years. Parent comment

Re:Zero-day in jQuery plugin sample code exploited for at le... by lawnchair_larry on Monday October 22, 2018 @02:06AM (#18272526)
Not a good way to look at it. Sample code is equivalent to production code. It will be copied, verbatim, if it appears to work. Once it has the appearance of working, it isn’t looked at again. It doesn’t matter if you think people should be doing this or not. The only thing that matters is they will.
[ Parent | on HN ]
Re:Zero-day in jQuery plugin sample code exploited for at le... by LandR on Monday October 22, 2018 @03:58AM (#18272919)
Exactly this.

For most developers there doesn't seem to be a differentiation between example code on a blog post and actual producation code.

[ Parent | on HN ]