this post was submitted on 09 Dec 2023
628 points (99.1% liked)

Programmer Humor

32716 readers
333 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

founded 5 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 3 points 1 year ago (1 children)

Thin line between giving useful error messages and more attack surface.

[–] [email protected] 5 points 1 year ago (1 children)

If your code gives attack surface by information about what went wrong maybe you should not even deploy anything. If your code needs to be secret to be secure your code is anything but secure.

[–] [email protected] 4 points 1 year ago

Not code but internet. A often seen error is letting Appache/Nginx display their name & version in 403/404 pages. First step in planning an attack.