Up to 1,500 businesses affected by ransomware attack, Kaseya CEO says

Re:Up to 1,500 businesses affected by ransomware attack, Kas... by raesene9 on Tuesday July 06, 2021 @01:37PM (#27751769)

The thing about Classic ASP is that it has no in-built protections and the individual developer has to code all defence, which is not great.

Also, how many classic ASP developers are there now , to add new protections for new issues...

And if you look at the linked thread, it doesn't seem like they've done a great job of maintenance...

[ Parent | on HN ]

Re:Up to 1,500 businesses affected by ransomware attack, Kas... by giardini on Tuesday July 06, 2021 @02:21PM (#27752363)

raesene9 says >"The thing about Classic ASP is that it has no in-built protections and the individual developer has to code all defence,,,"<

Yes, it is just like PHP or Perl or Ruby with the CGI specification.

raesene9 says >" how many classic ASP developers are there now ..."<

Good question! But IMO a web developer could learn classic ASP in a single day!8-))

raesene9 says >"the individual developer has to code all defence,<

Yes, just like PHP or Perl or Python.

[ Parent | on HN ]

Re:Up to 1,500 businesses affected by ransomware attack, Kas... by raesene9 on Tuesday July 06, 2021 @02:28PM (#27752468)

Sure so they learn classic ASP in a day, now they have to code their own custom routines for XSS protection, SQLi Protection, SSRF protection etc etc etc

or.... they could move the application to a supported platform with a wider developer base and in-built protections against common web application security attacks.

There is a reason why most web app developers do not hand code their entire stacks. For example why ruby web developers use rails. Web app. sec. is a a relatively complex field to get right, full of edge cases. Having each and every web app development team take the time to understand all those cases and edges probably isn't the best use of scarce developer resources.

[ Parent | on HN ]