Trailblazing Braille Taser

  • 0 Posts
  • 185 Comments
Joined 1 year ago
cake
Cake day: August 16th, 2023

help-circle










  • All countries have internet censorship.

    Agreed.

    If your issue is with what is being labeled illegal you need to focus on that.

    My issue is not with any content being labeled illegal. I don’t like the government enacting censorship by ordering ISPs to block certain traffic.

    I think that Brazil is within their rights to seize property or assets of entities engaging in illegal activity.

    It’s the sort of asymmetric power that concerns me, because by ordering the ISPs around, they can block the entire country’s access to information with the flick of a switch. I don’t want my government getting too comfortable with this kind of power because I don’t know who will wield it next year.

    I think ISPs should be dumb pipes. They should not be responsible for censoring content. They shouldn’t even know what they’re transporting, ideally.




  • You know, the reason this happens is that you can ask your database to execute a string type, but languages usually don’t distinguish between a static string and a dynamically constructed string.

    Not to proselytize, but this is a place where rust’s lifetime annotations can shine. The DB interface should take a &'static str( and a variable number of parameters to insert) so it can be certain that no untrusted user input has already been injected into the query string. Assuming all static data is trusted, the sql injection vulnerabilities just went poof.

    Sadly, it looks like rusqlite’s execute() takes a non-static str. I wonder why.