627
you are viewing a single comment's thread
view the rest of the comments
[-] MonkderZweite@feddit.ch 3 points 9 months ago

Thin line between giving useful error messages and more attack surface.

[-] Johanno@feddit.de 5 points 9 months ago

If your code gives attack surface by information about what went wrong maybe you should not even deploy anything. If your code needs to be secret to be secure your code is anything but secure.

[-] MonkderZweite@feddit.ch 4 points 9 months ago

Not code but internet. A often seen error is letting Appache/Nginx display their name & version in 403/404 pages. First step in planning an attack.

this post was submitted on 09 Dec 2023
627 points (99.1% liked)

Programmer Humor

31995 readers
132 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

founded 5 years ago
MODERATORS