Re:The modern HTTPS world has no place for old web servers
by cxr on Wednesday May 13, 2020 @01:38PM
(#23169406)
> the point made was that you don't want to ingest anything other than what which is provided by the expected and hopefully trusted author
What you actually said went quite a bit further than that. You outlined a scenario that involved arbitrary code execution.
> Yours was a facetious point to make.
"Facile", maybe? Even with that correction, the point was not facile—after all, it forced to you walk back from the original picture you painted of an RCE to a place where someone may get told there's going to be a mid-summer blizzard.
What you actually said went quite a bit further than that. You outlined a scenario that involved arbitrary code execution.
> Yours was a facetious point to make.
"Facile", maybe? Even with that correction, the point was not facile—after all, it forced to you walk back from the original picture you painted of an RCE to a place where someone may get told there's going to be a mid-summer blizzard.
https://rationalwiki.org/wiki/Motte_and_bailey