Hacker Newsnew | past | comments | ask | show | jobs | submit | vz0's commentslogin

What about phpMyAdmin and others alike webapps? Are they inherently insecure?


Those are different, as they only do what they are meant to do (give access to the databases).

They don't give untintended full access to the web server.

That said, they are a little insecure.


>They don't give unintended full access to the web server.

https://en.wikipedia.org/wiki/Webmin

Maybe not unintended, but definitely full access, and the world is almost certainly full of outdated/non whitelist access/weakly passworded panels.

Also, on a a sufficiently misconfigured server, you could always use \! (mysql's shell_exec, etc.) with phpmyadmin etc. to open a remote shell somewhere, then work from there.


in Argentina a passport costs ~$150 (ARS) but you have the choice of paying 10x (~$1000) and getting the document on the next working 24hs.


Find the type of:

fix x = x x


GCC is finally switching from C to C++, and they are actually avoiding exceptions and RTTI.

http://gcc.gnu.org/wiki/CppConventions

I salute them on following strict coding conventions.


I agree, this is just a rant on C++.

Coming from Java world, I can tell that it is nice being able to raise exceptions from the constructor.

However, switching from C++ to C is absurd. C++ is (mostly) a super set of C. Whatever you want to do in C, in C++ is also possible.

If there are some C++ features (exceptions, classes, contructors, etc.) that are making his coding task more complicated, he should simply stop using those features and refactor his code.


There is one advantage to writing in plain ANSI C and it is that you get it to compile and run on anything.


I wouldn't say absurd. Certainly you can use C functions in C++. But if you want to eliminate the use of most or all C++-only features, the only way to guarantee that is to not use C++. White or blacklists can be circumvented, intentionally or inadvertently.


Anger Fog found this issue one year earlier, 2008:

http://www.cygwin.com/ml/libc-help/2008-08/msg00007.html


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: