News for hackers. Stuff that matters.

A comment on The most dangerous code in the world. Parent comment

Re:The most dangerous code in the world by tptacek on Thursday October 25, 2012 @12:18AM (#4696354)
Yes, yes, I know, stupid Paypal, stupid Amazon, we get it. VERIFYHOST=1 doing nothing makes perfect sense, you just have to read the documentation. Of course.
[ Parent | on HN ]
Re:The most dangerous code in the world by kyberias on Thursday October 25, 2012 @12:28AM (#4696377)
Yes, Amazon et.al. made some mistakes due being lazy and PHP being the nice language that it is. They have fixed it. Let's go ahead and find another non-default, documented parameter value in a library and call it a vulnerability.
[ Parent | on HN ]
Re:The most dangerous code in the world by tptacek on Thursday October 25, 2012 @12:35AM (#4696390)
Ok. Your turn. Go!
[ Parent | on HN ]
Re:The most dangerous code in the world by jacques_chester on Friday October 26, 2012 @12:28AM (#4700875)
Policy vs Mechanism.
[ Parent | on HN ]