News for hackers. Stuff that matters.
Re:String types are fine. How about your code? by nabla9 on Thursday November 28, 2013 @08:19AM (#6814373)
The author argues that when string processing becomes complicated, it does not matter and incorrect results are usually OK.

Everybody knows about Bobby Tables? How about Mr. เจ้าพระยาบดินทรเดชา Unicode?

What if somebody told you that if certain exotic names are entered into the system by certain input method, government officials can't find those people in their searches, including full text search to a police report?

Re:String types are fine. How about your code? by bcoates on Thursday November 28, 2013 @09:41AM (#6814676)
SQL injection is caused by exactly the confusion between human- and machine- readable text that the author is warning against.