TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Taxonomy of In-the-Wild Exploitation

2 点作者 mdb31大约 3 年前

1 comment

mdb31大约 3 年前
Interesting, and not just in the &quot;memory safe languages will save the world&quot; sense.<p>Most of my bugs are either in the category &#x27;logic&#x27; or &#x27;ux&#x27;. For the former, unit tests remain the best defense IMHO, but there&#x27;s always that insidious class of data-driven logic bugs.<p>UX tends to be the most frustrating bug class. Like: there is a separate view in my app to allow users to do X. Yet, users insist on doing X by abusing feature Y, which gives a partial-but-sometimes-wildly-wrong result.<p>My solution to that is to obsessively monitor user action logs, and to modify the abused view to still give the right results (through an annotation) in case it detects the &#x27;wrong&#x27; use case.<p>One day, I will figure out how to properly talk to customers...