C# Discussion Boards - CodeProject

OriginalGriff28-Feb-21 21:23

OriginalGriff

28-Feb-21 21:23

Wrong site: this is not a hacking site, and we do not condone, support, or assist in the production of malicious code in any way, form, or manner. This is a professional site for professional developers.

You will get no help hacking anything here.

"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
"Common sense is so rare these days, it should be classified as a super power" - Random T-shirt
AntiTwitter: @DalekDave is now a follower!

Maximilien1-Mar-21 9:45

Maximilien

1-Mar-21 9:45

I giving the benefit of the doubt to the user.

Maybe he's using hacking as the generic word for programming.

Hack | Definition of Hack by Merriam-Webster

": to write computer programs for enjoyment"

The same way we have "hackaton"

I'd rather be phishing!

OriginalGriff1-Mar-21 10:28

OriginalGriff

1-Mar-21 10:28

That's why I didn't add a report in S&A.

trønderen2-Mar-21 8:57

trønderen

2-Mar-21 8:57

What's wrong with hacking? I had a parrot doing it all the time!

SawmillTurtle1-Mar-21 9:17

SawmillTurtle

1-Mar-21 9:17

In the words of Biff Tannen: "I think you've got the wrong car, McFly."

20212a1-Mar-21 9:38

1-Mar-21 9:38

I like hacking. That's one of the best ways to learn how things work. Do you have a question?

Eddy Vluggen2-Mar-21 9:54

2-Mar-21 9:54

Learning how to exploit a vulnerability teaches not how to code.

Been doing development for over 20 years, and a "little" paranoid. Sporting my own hostfile and delivering updates to multiple hosts.

I like education.

Bastard Programmer from Hell Suspicious | :suss:

"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.

20212a2-Mar-21 10:00

2-Mar-21 10:00

Eddy Vluggen wrote:
Learning how to exploit a vulnerability teaches not how to code.

Sure it can.

Just like SQL injection. That's hacking but we talk about it all the time. Hacking is a good way to learn how things work.

Eddy Vluggen2-Mar-21 10:22

2-Mar-21 10:22

20212 wrote:
Sure it can.

No, it doesn't; it teaches nothing about patterns, not even about security, it only shows where breaches are.

20212 wrote:
Just like SQL injection

Thank you for proving my point.

20212 wrote:
That's hacking but we talk about it all the time. Hacking is a good way to learn how things work.

It's a way of learning to know about weaknesses, not about how things work. Here an analogy for ya; you claim you can run an atomic power plant, because you know an unguarded door. In my opinion, you not even less qualified than any real programmer, but a liability.

And you know you are; that's why I post under my real name, and you don't dare too.

--edit
From a real criminal; do you have any questions?

Bastard Programmer from Hell Suspicious | :suss:

"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.

20212a2-Mar-21 10:29

2-Mar-21 10:29

Eddy Vluggen wrote:
Thank you for proving my point.

I don't think you understand your point then.

If all we told people is to use parameterized queries but did not explain why, the lesson would not be learned as well. Explaining how non-parameterized queries can allow someone to hack your db is magnitudes more valuable than just telling them to use parameters.

Eddy Vluggen wrote:
that's why I post under my real name, and you don't dare too.

1. You can't prove that it's your real name.
2. You can't prove this is not my real name.

Eddy Vluggen2-Mar-21 10:40

2-Mar-21 10:40

20212 wrote:
I don't think you understand your point then.

Not my problem, is it?

20212 wrote:
If all we told people is to use parameterized queries but did not explain why, the lesson would not be learned as well. Explaining how non-parameterized queries can allow someone to hack your db is magnitudes more valuable than just telling them to use parameters.

Again, thanks for proving my point Smile | :)

20212 wrote:
1. You can't prove that it's your real name.

I can, there's a photograph on here from me. Look it up. No, no record government linking me to that, I not that much of a fool.

20212 wrote:
2. You can't prove this is not my real name.

Easy, that's not even a legal name; you're not allowed to name children like that.

I been a developer for over 20 years. Been concerned with security for the same time. We "know a bit" about the subject Smile | :)

Bastard Programmer from Hell Suspicious | :suss:

"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.

20212a3-Mar-21 1:07

3-Mar-21 1:07

Eddy Vluggen wrote:
there's a photograph on here from me. Look it up.

You're a cat??!! Laugh | :laugh:

A picture of a cat is not proof. You pretend to be scientific but don't even know how to prove something. Strange.

Eddy Vluggen wrote:
that's not even a legal name;

Ah yes, because you know the laws of every jurisdiction in this world. Laugh | :laugh:

You do have a sense of humor. I like that. Thumbs Up | :thumbsup:

Eddy Vluggen wrote:
We "know a bit"

Do you have a mouse in your pocket? Laugh | :laugh:

trønderen2-Mar-21 11:45

trønderen

2-Mar-21 11:45

20212 wrote:
Just like SQL injection.

I am so old that I find the very idea of SQL injection completely crazy. Why would anyone even get close to the idea of passing SQL code ahead, without parsing it and consider it against authorization restrictions?

I know. "Because it would reduce performance". So then you could make two versions of your SQL based application: One HighPeformance version to use when benchmarking or comparing against alternatives. When you boost multiplatform and high availability, there is another, "safe" version with all the flexibility and functionality ruining performance, but beneficial in a lot of other ways.

Eddy Vluggen2-Mar-21 12:50