Hacker News new | past | comments | ask | show | jobs | submit login

The author argues that when string processing becomes complicated, it does not matter and incorrect results are usually OK.

Everybody knows about Bobby Tables? How about Mr. เจ้าพระยาบดินทรเดชา Unicode?

What if somebody told you that if certain exotic names are entered into the system by certain input method, government officials can't find those people in their searches, including full text search to a police report?




SQL injection is caused by exactly the confusion between human- and machine- readable text that the author is warning against.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: