News for hackers. Stuff that matters.

A comment on ACIDRain: Concurrency-Related Attacks on Database-Backed Web Applications (2017) [pdf].

Re:ACIDRain: Concurrency-Related Attacks on Database-Backed ... by saurabhnanda on Tuesday May 28, 2019 @03:37AM (#20028027)
Does this impact postgres backed applications?
[ Parent | on HN ]
Re:ACIDRain: Concurrency-Related Attacks on Database-Backed ... by dunkelheit on Tuesday May 28, 2019 @04:06AM (#20028143)
Yes! The default isolation level in postgres is READ COMMITTED which is rather weak and allows for the types of concurrency bugs discussed in the article (unless you use SELECT FOR UPDATE or some other kind of locking).

https://www.postgresql.org/docs/11/transaction-iso.html

[ Parent | on HN ]