News for hackers. Stuff that matters.

A comment on Argentina's voting machine system leaked?. Parent comment

Re:Argentina's voting machine system leaked? by r0naa on Friday June 19, 2015 @10:45PM (#9748752)
Wow. I find it stunning that in 2015,there is still engineers who execute user inputs without any kind of sanitization.
[ Parent | on HN ]
Re:Argentina's voting machine system leaked? by fisadev on Saturday June 20, 2015 @02:07PM (#9750581)
The input is sanitized: https://github.com/prometheus-ar/vot.ar/blob/master/msa/voto...

It's just that people are too eager to scream "vulnerability!" without properly checking it before.

[ Parent | on HN ]
Re:Argentina's voting machine system leaked? by r0naa on Saturday June 20, 2015 @02:50PM (#9750698)
Correct me if I am wrong but client side sanitization does not really count. It is really easy to bypass that check (send packets directly to the backend or use dev tools for example)
[ Parent | on HN ]
Re:Argentina's voting machine system leaked? by fisadev on Saturday June 20, 2015 @03:16PM (#9750765)
No, because it's not a website with a network between the backend and frontend. It's a desktop app, with no network connection, just using html for the gui. Nobody can send packages to it.
[ Parent | on HN ]