News for hackers. Stuff that matters.
Re:UK Company named "><SCRIPT SRC=HTTPS://MJT.XSS.HT> LTD" f... by tedunangst on Friday October 25, 2024 @04:44PM (#41949529)
What type checking would you add to your database schema to prevent this?
Re:UK Company named "><SCRIPT SRC=HTTPS://MJT.XSS.HT> LTD" f... by RustySpottedCat on Friday October 25, 2024 @04:56PM (#41949677)
I don't think this can be prevented with a schema. The only thing someone has to do is legally rename themselves to "Driving license" to be the edge case in this check. Teach cops to look for the (almost) international driver license format where your names are preceeded by the numbers 1 and 2 on the license.
Re:UK Company named "><SCRIPT SRC=HTTPS://MJT.XSS.HT> LTD" f... by fragmede on Friday October 25, 2024 @05:17PM (#41949869)
One thing (that was done in 2013) would be to standardize the format of the card, so that name is in the same place no matter which (EEA) country it's from.

https://en.wikipedia.org/wiki/European_driving_licence

The other thing is to list out the field names in all 27/30/33 languages and flag those for double checking. Theres probably few people named "drivers license". Finally, just take a photo of the whole ID so even if the wrong value is entered initially, the right value can be recovered later as necessary.

None of that is foolproof, but it doesn't have to be 100% foolproof, just not totally broken.

Re:UK Company named "><SCRIPT SRC=HTTPS://MJT.XSS.HT> LTD" f... by justsomehnguy on Friday October 25, 2024 @04:56PM (#41949676)
That's an administrative problem so don't solve it with a technical means.