Steve Jones - SSC Editor (3/4/2013)

---

<snip/>This makes me want to re-architect the way we build data driven application in the future, to prevent this type of vandalism. Maybe building an application level firewall that proxies all access to a database server. The idea of application servers was very popular a decade ago, but it seems few systems actually implemented this type of architecture. Perhaps this is because the web server/database server pairing is such an easy paradigm to build for most developers.<snip/>

paul.knibbs (3/5/2013)

---

I could be really smug because I always use Firefox, but instead I'll allow myself to be gobsmacked that such an obvious flaw has made it into three major browsers. Who audits the code for these things?

Eric M Russell (3/5/2013)

---

[quote]paul.knibbs (3/5/2013)
FireFox does support HTML5 Storage, are you sure it's implemented in a way that's safer than IE and Chrome? Go to the website Steve mentioned in his article and see.

That's a denial of service type attack that I hadn't expected, but it is an interesting attack vector. I wouldn't expect this to impact servers, but if servers are consuming web services, and using controls based on browsers, there is the possibility this type of attack might affect them. I'd hope this were limited to web servers and not impact database servers, but it's certainly a concern if you have processes running on your database server that might retrieve data from a remote source.

andyw-834405 (3/5/2013)

---

If FillDisk.com is a malicious site, why is it hyper-linked in your editorial?

paul.knibbs (3/5/2013)

---

... I'll allow myself to be gobsmacked that such an obvious flaw has made it into three major browsers. Who audits the code for these things?

Gary Varga (3/5/2013)

---

...searching for the IT variation of a Darwin Award winner?