• 0 Posts
  • 46 Comments
Joined 2 years ago
cake
Cake day: October 19th, 2024

help-circle











  • Lovable Sidekick@lemmy.worldtoProgrammer Humor@programming.dev#NULL!
    link
    fedilink
    English
    arrow-up
    5
    ·
    edit-2
    7 hours ago

    You wouldn’t - what they’re describing is called “SQL injection” - a way to fool poorly written web server code (regardless of what language it’s writen in) into executing SQL code. The poorly written server code takes what’s entered in a form field on a web page and pastes it into a skeleton of a SQL statement - in this case the text in the input field is SQL that ends the intended statement, followed by a new statement that deletes a table. For this to even work, the SQL skeleton on the server would have to be structured in just the right way so the modified version with the pasted-in text still makes sense. For this reason, hackers attempting SQL injection usually have to do a lot of trial and error to get something to happen. The only way it can work at all is if the server software handling the web page sends SQL commands to a database server as text, as if they’re being typed in, and the server executes them. You can’t inject C in this way because unlike SQL, C code isn’t just executed, C programs have to be precompiled.



  • I love how things like this develop a mystique. The KFC eleven herbs and spices, supposedly on a two-part list kept in separate vaults. The handwritten recipe for Coca-Cola, transported under heavy guard to a new vault in 2011. Donald Trump’s hair elixir formula, kept secret by Epstein until his prison cell suicide during a coincidental random camera malfunction. The list goes on…







  • Sorry, I misstated the article - yes, what Jaczak modified or forked seems to be a networking plugin. What I get out of the article is that Bambu says the plugin is “separately delivered” software which they claim means it doesn’t fall under the AGPL. The way I interpret it is that there’s an unresolved dispute whose technicalities I don’t know enough about to have originally taken Jarczak’s side on. Maybe you do but for now I’m going back to being neutral. I agree putting pressure on the guy if they have no grounds for it is wrong - if that’s what they did.