Week 14 - Code injection and XSS
Created Monday 23 November 2020
As we have learned
..it's generally frightfully easy to have people running code where it shouldn't.
Why this is hard (impossible?)
A lot of these vectors are simply "approved" vectors..
i.e. channels that you simply can't control, even though they are official.
Nevertheless, we fight on..
There are also malicious actors:
Harmful or Deceptive code
Bad actors take advantage of flaws in programs,e.g.
"Buffer Overflow" attacks
Another avenue, is carelessness or ignorance:
E.g. USB's on the ground
Yet another vector of attack
is the web.
This is especially difficult, because hyperlinks are designed to be clickable,
so they show up in other places, e.g. email.
(e.g. Phishing)
Also, Javascript
Rush to market =
Language that even its creator says isn't great =
Easy to hack
Backlinks: FSU Courses:LIS4774:RawSlides