nanog mailing list archives
Re: No DNS poisoning at Google (in case of trouble, blame the DNS)
From: Arturo Servin <arturo.servin () gmail com>
Date: Thu, 28 Jun 2012 09:48:08 -0300
On 28 Jun 2012, at 08:05, Tei wrote:
On 27 June 2012 09:50, Stephane Bortzmeyer <bortzmeyer () nic fr> wrote:(<troll>specially for a Web site written in PHP</troll>)?We software makers have a problem, when a customer ask for a application, often theres a wen project that already do it ( for the most part is a round peg on a round hole). So a natural solution is to install this project and customize it to his needs (theme, perhaps some programming). The other option is to create a code from scratch (perhaps using a framework). If you create the code from scratch, it will be safe.
I would challenge this. This is not true unless you follow very strict rules to make your code safe, and even then, you are not completely safe.
A tree cant get a human virus, and a human can't get a tree virus. You are not unhackable, bad practices will byte you on the long term, but you don't see exploits made specifically for this custom made code daily.
Think about sql injection, they are not only to specific platforms but to general bad programming practices. <snip the rest, it just … sucks > =) Regards, as
Current thread:
- No DNS poisoning at Google (in case of trouble, blame the DNS), (continued)
- No DNS poisoning at Google (in case of trouble, blame the DNS) Stephane Bortzmeyer (Jun 27)
- Re: No DNS poisoning at Google (in case of trouble, blame the DNS) Daniel Rohan (Jun 27)
- Re: No DNS poisoning at Google (in case of trouble, blame the DNS) Arturo Servin (Jun 27)
- Re: No DNS poisoning at Google (in case of trouble, blame the DNS) Jason Hellenthal (Jun 27)
- Re: No DNS poisoning at Google (in case of trouble, blame the DNS) Ryan Rawdon (Jun 27)
- Re: No DNS poisoning at Google (in case of trouble, blame the DNS) Ryan Rawdon (Jun 27)
- RE: No DNS poisoning at Google (in case of trouble, blame the DNS) Matthew Black (Jun 27)
- RE: No DNS poisoning at Google (in case of trouble, blame the DNS) Matthew Black (Jun 27)
- Re: No DNS poisoning at Google (in case of trouble, blame the DNS) AP NANOG (Jun 27)
- Re: No DNS poisoning at Google (in case of trouble, blame the DNS) Daniel Rohan (Jun 27)
- No DNS poisoning at Google (in case of trouble, blame the DNS) Stephane Bortzmeyer (Jun 27)
- Re: No DNS poisoning at Google (in case of trouble, blame the DNS) Arturo Servin (Jun 28)
- Re: No DNS poisoning at Google (in case of trouble, blame the DNS) Tei (Jun 28)
- RE: DNS poisoning at Google? Matthew Black (Jun 26)
- Re: DNS poisoning at Google? Sadiq Saif (Jun 26)
- Re: DNS poisoning at Google? Ishmael Rufus (Jun 26)
- RE: DNS poisoning at Google? Matthew Black (Jun 26)
- Re: DNS poisoning at Google? Michael J Wise (Jun 26)
- RE: DNS poisoning at Google? Matthew Black (Jun 26)
- Re: DNS poisoning at Google? Jeremy Hanmer (Jun 26)