Nats says that the failure was triggered by a single piece of data in a flight plan that was wrongly input to its system by an unnamed airline.
It will be fascinating as the details of this emerge.
As a reminder, if you can crash a program with malformed input, you’re most of the way to finding a security hole allowing you to exploit that program with malformed input.
Ah, yes, Little Bobby DROP TABLES;
My mum was definitely onto something.
Ah, you’re travelling in to London’); DROP TABLE Airports;-- today? And how is the weather in North Korea?
Who would have thought that validating your inputs would be a good idea? /S
This is so relevant to an issue I’m having. It turns out a spelling mistake caused all my API calls not to quote the services needed. So basically thousands of dollars thrown away because I fucked up.
But… why is their API not raising when I send unknown data? Sounds very susceptible to hacking. And of course when I press the issue I get ignored. I hate this industry (shipping).
