News for hackers. Stuff that matters.

A comment on CVE-2023-40547 – avoid incorrectly trusting HTTP headers. Parent comment

Re:CVE-2023-40547 – avoid incorrectly trusting HTTP headers by ajross on Thursday January 25, 2024 @02:40PM (#39134124)
I'm not the person you should be arguing with. I didn't write the license and I'm not the judge that would have to make the decision. I was explaining why the collision between software freedom and end user security requirements (which is a very real thing!) is seen as a risk to the people shipping and supporting actual hardware.
[ Parent | on HN ]
Re:CVE-2023-40547 – avoid incorrectly trusting HTTP headers by AshamedCaptain on Thursday January 25, 2024 @02:41PM (#39134136)
There is no collision _whatsoever_ between software freedom and security requirements. It's an illusion which happens to be highly convenient to those who want to promote an artificially controlled market and sell that as snake-oil security.
[ Parent | on HN ]