peter,
@peter@area51.social avatar

They should be sanitising their database inputs rather than change the input data!

"A local authority has announced it will ban apostrophes on street signs to avoid problems with computer systems."

North Yorkshire Council to phase out apostrophe use on street signs - BBC News
https://www.bbc.co.uk/news/uk-england-york-north-yorkshire-68942321

#database #bobbyTables

JorgeStolfi,
@JorgeStolfi@mas.to avatar

@peter

Does it mean that one can crash the NYC computers with a simple black marker - by adding an apostrophe to a street sign?

Hopefully no one will go to the trouble of covering a street sign with a card saying

'); DROP TABLE violations;

https://xkcd.com/327/

peter,
@peter@area51.social avatar

@JorgeStolfi that's the classical SQL exploit with unsanitised inputs & that xkcd is why I included the hash tag 😉

zalasur,
@zalasur@mastodon.surazal.net avatar

@JorgeStolfi @peter They probably do sanitize their inputs... by removing all the apostrophes.

"Good enough" is definitely a potential culprit here.

TimWardCam,
@TimWardCam@c.im avatar

@peter I did the opposite in Cambridge a few years ago.

There was a local campaign (this is Cambridge, after all) to get street names properly punctuated. Conventional wisdom was that the punctuation was omitted at the request of the emergency services, but we checked with them again and they said that they didn't care any more.

The local rag joined in, with a series of pictures of wrong and/or inconsistent street name signs. But they missed one I knew about, where the street had three different signs at various places, along the lines of (this wasn't the actual name) "Pirates Walk", "Pirate's Walk" and "Pirates' Walk". So I was able to tease them that the situation was worse than they'd discovered! - it's always useful for councillors to keep up good relations with the local journos.

I changed the policy to allow punctuation. (OK, to be honest, after being lent on somewhat by the council leader, who thought it was more of a big deal than I did - left to myself I might not have bothered to do this as an emergency decision and I might have left it until the next review.)

ret,
@ret@furry.engineer avatar

@peter @revk just rename them all like St. Mary\’s Walk and be done with it.

markwalker,
@markwalker@fosstodon.org avatar

@peter sounds like the classic where someone retires and there's nobody left that can do their job. Some old code that everyone is now afraid to touch.

JohnJBurnsIII,
@JohnJBurnsIII@kzoo.to avatar

@peter

The problem is not the proper signage...

The problem is:

-- the decision makers not budgeting the $$ and time to correct the computers to handle keyboard characters available for 50+ years.

-- the programmers for not handling characters on the keyboard properly. Yes... I get old mainframes may have limitations... hello -- we are in the 3 decade of the 21st century.

--
Did you see article about 101 year old being rejected as too young? Y2K not over.

peter,
@peter@area51.social avatar

@JohnJBurnsIII yes I did see that for the 102 year old, totally ignoring what we all did to ensure y2k didn't cause an issue.

As for the limitations, yes it is the third decade in the 21st century but I'm still seeing lots of developers getting temporal mechanics wrong

falcon,
@falcon@mastodon.falconk.rocks avatar

@peter or, you know, using their database correctly. It's decades past the point where data and program need to mix. Apostrophes aren't dirty.

RogerBW,
@RogerBW@emacs.ch avatar

@peter Out of band signalling. Learn from Captain Crunch.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • kavyap
  • thenastyranch
  • Durango
  • DreamBathrooms
  • ngwrru68w68
  • magazineikmin
  • cubers
  • Youngstown
  • mdbf
  • slotface
  • osvaldo12
  • GTA5RPClips
  • rosin
  • InstantRegret
  • provamag3
  • everett
  • tacticalgear
  • vwfavf
  • tester
  • normalnudes
  • modclub
  • ethstaker
  • khanakhh
  • cisconetworking
  • anitta
  • Leos
  • megavids
  • JUstTest
  • All magazines