Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I Went to SQL Injection Court

sockpuppet.org

Post reply on HN
Print view View original

21–30 of 463 posts

Re: I Went to SQL Injection Court

#21

Post by wswope »

gpm wrote: post #10
wswope wrote: post #7

Anyone with a legal background willing to opine about potential workarounds to this ruling? Specifically, would a request for “data field labels” (i.e. a column list without any table structure info) likely circumvent the exemption?

I think that would run afoul of > The one big limitation of Illinois FOIA (with FOIA laws everywhere, really) is that you can’t use them to compel public bodies to create new records. Unless for some reason they already had a list of columns without table structure. (Not that I claim to have a legal background)

I had that thought too, but my naive rebuttal would be that the column data already exists by default in any standard RDBMS as information_schema.columns. No new record creation required.

Re: I Went to SQL Injection Court

#22

Post by esotericimpl »

rectang wrote: post #8
bobsmooth wrote: post #4

What stands out to me about this article is the time between court appearances. Seems like if you want to accomplish anything in court you need to be prepared to spend years of your life on it.

And of course, people and entities (private or as in this case public) who have a lot of resources take advantage of that, a state of affairs which often serves to perpetuate injustice indefinitely.

[dead]

Re: I Went to SQL Injection Court

#24

Post by [deleted] »

duxup wrote: post #20
gpm wrote: post #10

Earlier quoted context omitted.

I think that would run afoul of > The one big limitation of Illinois FOIA (with FOIA laws everywhere, really) is that you can’t use them to compel public bodies to create new records. Unless for some reason they already had a list of columns without table structure. (Not that I claim to have a legal background)

Yes but what if we come up with a directive that every FOIA request must be logged into a DB. Therefore every request is automatically invalid as it requires we create a record! /s

[deleted]

Re: I Went to SQL Injection Court

#25

Post by gowld »

This is part of what discouraged me from going to law school. So much of litigation is Kabuki theater, grant rhetoric not in any way intended at achieving a just or logical outcomes, but designed only to the person in power an excuse to decide however they had already wanted to decide before the case was tried.

Re: I Went to SQL Injection Court

#26

Post by paulddraper »

pavon wrote: post #17

Great read. Frustrating that the court ruled that a schema was a file layout, since I don't think it is, but at the same time if it didn't fall under that exception, there is a strong arguments that would be considered "documentation pertaining to all logical ... design of computerized systems". A schema is literally, the logical design of the database, and the database is a part of the computerized system. Once it w…

How is a database schema not a file layout?

Re: I Went to SQL Injection Court

#28

Post by barbazoo »

bobsmooth wrote: post #4

What stands out to me about this article is the time between court appearances. Seems like if you want to accomplish anything in court you need to be prepared to spend years of your life on it.

I thought the same thing. Sure it's async but still you have to keep this in your mind for a very long time.

Re: I Went to SQL Injection Court

#29

Post by kasey_junk »

paulddraper wrote: post #26
pavon wrote: post #17

Great read. Frustrating that the court ruled that a schema was a file layout, since I don't think it is, but at the same time if it didn't fall under that exception, there is a strong arguments that would be considered "documentation pertaining to all logical ... design of computerized systems". A schema is literally, the logical design of the database, and the database is a part of the computerized system. Once it w…

How is a database schema not a file layout?

The article describes why. 2 different db engines (or even instances) can use different file layouts for the same schema.

In many was sql is all about divorcing the schema from the files.

Re: I Went to SQL Injection Court

#30

Post by [deleted] »

paulddraper wrote: post #26
pavon wrote: post #17

Great read. Frustrating that the court ruled that a schema was a file layout, since I don't think it is, but at the same time if it didn't fall under that exception, there is a strong arguments that would be considered "documentation pertaining to all logical ... design of computerized systems". A schema is literally, the logical design of the database, and the database is a part of the computerized system. Once it w…

How is a database schema not a file layout?

[deleted]
Post reply on HN