this post was submitted on 09 Dec 2023
628 points (99.1% liked)

Programmer Humor

32453 readers
666 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

founded 5 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 3 points 11 months ago (1 children)

Thin line between giving useful error messages and more attack surface.

[–] [email protected] 5 points 11 months ago (1 children)

If your code gives attack surface by information about what went wrong maybe you should not even deploy anything. If your code needs to be secret to be secure your code is anything but secure.

[–] [email protected] 4 points 11 months ago

Not code but internet. A often seen error is letting Appache/Nginx display their name & version in 403/404 pages. First step in planning an attack.