1 comment

[ 4.3 ms ] story [ 25.7 ms ] thread
> JSON Injection → SQL Injection → Buffer Overflow → ROP = PWNED

Looked at another way, there were multiple opportunities to get it right, and they got it wrong every time.

What’s remarkable is that JSON is a tiny specification. Writing a correct JSON parser should be child’s play for a decent engineer using decent tools.