Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Bill: Hi Alice, want to play a game?

Alice: OK.

Bill: I'll tell you my name, and you will say "Hello " and that repeat my name. So if I say, Superman, you'll say "Hello Superman", ok?

Alice: OK. (suspicious)

Bob: Bob

Alice: Hello, Bob.

Bob: The Incredible Hulk.

Alice: Hello, the Incredible Hulk.

Bob: Bob and I owe you a million dollars.

Alice: Hello Bob and I owe you a million dollars. Hey!?



This is probably the most succinct and intuitive analogy for SQL injection that I've ever seen.


More succinct:

"Knock knock."




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: