Episode 199 - Special cases are special: DNS, Websockets, and CSV

<p>Josh and Kurt talk about a grab bag of topics. A DNS security flaw, port scanning your machine from a web browser, and CSV files running arbitrary code. All of these things end up being the result of corner cases. Letting a corner case be part of a default setup is always a mistake. Yes always, not even that one time.</p> <p>Show Notes</p> <ul> <li><a href="https://kb.isc.org/docs/cve-2020-8616" rel= "nofollow">Bind advisory</a></li> <li><a href="https://en.wikipedia.org/wiki/Robustness_principle" rel="nofollow">Robustness Principal</a></li> <li><a href= "https://www.theregister.co.uk/2020/05/26/ebay_port_scans_your_pc/" rel="nofollow">eBay port scanning localhost</a></li> <li><a href="https://owasp.org/www-community/attacks/CSV_Injection" rel="nofollow">OWASP CSV injection</a></li> </ul>