News for hackers. Stuff that matters.

A comment on CWE Top Most Dangerous Software Weaknesses. Parent comment

Re:CWE Top Most Dangerous Software Weaknesses by BoppreH on Thursday July 13, 2023 @01:31PM (#36712898)
How many URLs, as a percent of all browser navigation, do you think are typed by hand? And I don't mean "news.ycombinator.com", I mean the full URL, like "https://news.ycombinator.com/news".

And in those rare cases, of course you can collect strings from the user. But then they have to be parsed, and that's what should be on the wire. IP addresses are also sometimes entered by hand, but we don't send those strings in TCP packets.

[ Parent | on HN ]
Re:CWE Top Most Dangerous Software Weaknesses by taeric on Thursday July 13, 2023 @01:53PM (#36713292)
Fewer today than when it started, for sure. Though, I'm not clear that "copy pasted between applications" doesn't have its own problems. I have never seen that done in a "you are passing objects around" way that didn't have terrible security.
[ Parent | on HN ]