If developers neglect to address all security issues, a future hacker will very likely exploit the flaw to extract confidential information from the website.
如果开发者忽视了解决所有安全问题,未来的黑客便很可能利用这一缺陷,从网站抽取机密信息。
Upgrading after a hacker USES this exploit to steal your information is simply too late, especially if you hold sensitive customer data.
在黑客们利用这个盗取你信息之后升级就完了,特别在你持有敏感用户数据的时候。
For handled exceptions, you need to strike a balance in your error messages between being helpful to the naive user and giving away too much information to the unscrupulous hacker.
对于已处理的异常,需要在错误消息中权衡:对无经验的用户有帮助,但不要向无道德的黑客透露过多信息。
应用推荐