News for hackers. Stuff that matters.
Re:Secure by Design by simonw on Monday March 23, 2020 @01:09PM (#22666096)
One of the things I learned working on software with millions of users is that ANYTHING that does not have a limit will eventually be abused by someone - often not even maliciously.

Got a feature that lets users add multiple additional options? Someone will use it to add 10,000 options, and now pages which display them in a <select> widget will slow to a crawl.

Re:Secure by Design by jorangreef on Monday March 23, 2020 @01:47PM (#22666608)
"Anything that does not have a limit will eventually be abused by someone."

There should be a law named for this.

What about Limit's Law?

Re:Secure by Design by coldacid on Monday March 23, 2020 @03:07PM (#22667530)
The Law of Limits would probably be better. X's Law only really works well as a name if X is itself a name. Law of X is better when X is a topic.