News for hackers. Stuff that matters.

A comment on UK Company named "><SCRIPT SRC=HTTPS://MJT.XSS.HT> LTD" forced to change it. Parent comment

Re:UK Company named "><SCRIPT SRC=HTTPS://MJT.XSS.HT> LTD" f... by stoperaticless on Friday October 25, 2024 @06:47PM (#41950627)
By disallowing, we normalise deviance (security wise).

Also, there can be a problem with who/how decides what is code. There are myriad of programming languages already, and for trolling or legal attack purposes, one could build interpreter using arbitrary words as keywords (to make problems for arbitrary company)

[ Parent | on HN ]
Re:UK Company named "><SCRIPT SRC=HTTPS://MJT.XSS.HT> LTD" f... by desas on Saturday October 26, 2024 @02:44AM (#41953025)
> there can be a problem with who/how decides what is code.

Blocking names that look like code is part of a defence in depth approach, it's not a standalone silver bullet.

[ Parent | on HN ]
Re:UK Company named "><SCRIPT SRC=HTTPS://MJT.XSS.HT> LTD" f... by stoperaticless on Saturday October 26, 2024 @04:10AM (#41953361)
I meant abuse scenarios.

Laws eventually are use not as intended, but as written.

“defense[1]”, “if happy begin something end”, “if”. All of these technically are code (somewhere). Also check out some esoteric language like: https://en.m.wikipedia.org/wiki/Whitespace_(programming_lang...

[ Parent | on HN ]