@ChristosArgyrop@mastodon.social
Post #1295357
2026-04-10 05:33 UTC
However If the security pattern was not known at the time the initial security review was done (think SQL ingestion pre 1988 which iirc was the year it was discovered) the code would have been considered secure. Very few code bases are continuously reviewed for security after the initial one. Another good example is the DOS using non randomized hash keys in scripting languages. This one does not even need ingestion of the code...
Replies (1)
-
@ChristosArgyrop@mastodon.social 2026-04-10 05:33
it simply needs to provide certain data to the hashes/dictionaries used by system languages eg Perl or Python. It was recognized more that 15 years ago and many software still does not randomize the keys for the hashes (design decision for performance, or just ignorance of the pattern). However if you run the AI it will likely pick this vulnerability and flag it.