Network World
Sunday, September 7, 2008
DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Community

Navigation

Don't bother with these guys

0

They mention the dangers of SQL injection, but not those of command line injection via Runtime.exec. They also don't discuss how to structure/process dynamic requests to prevent injection. They mention JSP's but not the dangers of the JSP compiler, or the benefits of JSP precompilation and removal of the JSP compiler. They don't talk about the principle of protocol transformation. They mention JAAS but not PAM's or LDAP. No talk of SSO and the impact of global sessions. No mention of how to use hardware routers with NAT and VPN. They mention exceptions, but nothing about modifying the standard error page not to display the exception call stack back to the caller. No mention of the hazards of JNI.

GAH!!!

Seriously. Don't bother with these guys until/unless they progress beyond the n00b stage.

Reply

The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <i> <b> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <blockquote> <br /> <br> <p>
  • Lines and paragraphs break automatically.
  • You can use BBCode tags in the text.
  • Web page addresses and e-mail addresses turn into links automatically.

More information about formatting options

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.

Latest software headlines from Network World:

At 10, Google reiterates commitment to CIOs

As Google turns 10, enterprise success in question

Zoho adds Google Docs-like file management

File storage and viewing apps for iPhone

Google adds YouTube-like service to Apps suite

  1   2   3   4   5   6   7   8   9  10  next 

Advertisement: