Live data from Hacker News

When your last name is Null, nothing works

wsj.com

221–230 of 310 posts

Re: When your last name is Null, nothing works

#221

Earlier quoted context omitted.

Back then i was so amazed i could "destroy" MS-DOS just by typing CTTY CLOCK$. Or Window 98 just by executing /CON/CON

Are these the MSFT equivalent of `rm -R` [delete everything on your linux box]?

You would need to be root to delete (close to) everything, but I guess the most valuable stuff is typically in one's home folder anyway.

Re: When your last name is Null, nothing works

#222

Earlier quoted context omitted.

or people whose middle name is their first name.

Hey, that's also relevant to me! I've checked my local laws, and where I live, your legal name is the one you consistently present yourself as. If you're Joe Frank Smith, and you go by Frank everywhere, that's your legal name . I've gotten so tired of having this argument. Inevitably some clerk will insist on calling me by my first name, "you know, your legal name ". No. My middle name is my legal name. It's what my…

Curious, if you don't like it why not change it?

Then you can be Frank Smith all the time.

Re: When your last name is Null, nothing works

#223
This is terrifying, because it implies that so many computer systems interpret user-supplied data as what should be out-of-band values. No computer system should ever interpret what is in the "last name" field, it should be a sequence of characters only. Every attempt at interpretation is an exploit waiting to happen.

Re: When your last name is Null, nothing works

#224
post #223

This is terrifying, because it implies that so many computer systems interpret user-supplied data as what should be out-of-band values. No computer system should ever interpret what is in the "last name" field, it should be a sequence of characters only. Every attempt at interpretation is an exploit waiting to happen.

Typed data?! What's next, unit tests? Memory safety? Where will it stop?

Re: When your last name is Null, nothing works

#225

My last name is a popular Irish name with an apostrophe in it. I have tons of issues with my name in forms. I'm basically a walking SQL injection detector. But also I've started to drop the apostrophe in most of my online profiles and things. So I think we're starting to see the end of apostrophes in people's names, thanks to some fun oddities of the internet and common database technologies.

> But also I've started to drop the apostrophe in most of my online profiles and things. So I think we're starting to see the end of apostrophes in people's names, thanks to some fun oddities of the internet and common database technologies.

This is a bugbear of mine! It's so frustrating that this is the easier path. Technology should make our lives better, not bend us to it's limitations!

No criticism on you of course, I'm as guilty.

Re: When your last name is Null, nothing works

#226
post #223

This is terrifying, because it implies that so many computer systems interpret user-supplied data as what should be out-of-band values. No computer system should ever interpret what is in the "last name" field, it should be a sequence of characters only. Every attempt at interpretation is an exploit waiting to happen.

In YAML (the gift that keeps on giving, see the False/Norway debacle) the last name of Null would have to be quoted, otherwise it would signify the null value.

Re: When your last name is Null, nothing works

#227
post #223

This is terrifying, because it implies that so many computer systems interpret user-supplied data as what should be out-of-band values. No computer system should ever interpret what is in the "last name" field, it should be a sequence of characters only. Every attempt at interpretation is an exploit waiting to happen.

I believe the primary point where this goes wrong is in http. There, null and "null" are indistinguishable. Using json would help, but older forms don't.

Re: When your last name is Null, nothing works

#228

It's amazing to watch systems do things as humans initially have intended, then see those system fail in the most spectacular ways, because the humans didn't think of every possible failure scenario. I've had great fun with my surname, which contains of two words and just a space in between. Lots of systems thought my "maiden name" was the first word and adressed me as Mrs. My wife has three first names, adopted my s…

>It's amazing to watch systems do things as humans initially have intended, then see those system fail in the most spectacular ways, because the humans didn't think of every possible failure scenario.

You should come to Taiwan! They've never considered non-Chinese names.

If you something online and pay by card, you can choose to ship it to a 7-Eleven or other convenience store, so you can pick it up at your own convenience. They'll ask for the name on your ID card/Passport, which the store will check before handing the parcel to you.

The problem? Many online stores do not accept names longer than a handful of characters. Chinese names are almost always two or three characters long, rarely four. Five or more characters exist according to a quick Google search, but I've never seen them myself. Good luck with western names, where even a short name like "John Doe" will be considered too long (The space counts as a character).

If you're a foreign resident, you can choose to get a Chinese name to deal with the parcel issue. Now you have two legal names: The name on your passport and the Chinese name. If you deal with public institutions, they'll prefer to use your Chinese name. Private companies have their own policies: Banks, for example, prefer to use the name on your passport. I've had issues with my insurance claims being rejected because the name on the government-provided documents did not match the name they had on file.

Re: When your last name is Null, nothing works

#229
post #226
post #223

This is terrifying, because it implies that so many computer systems interpret user-supplied data as what should be out-of-band values. No computer system should ever interpret what is in the "last name" field, it should be a sequence of characters only. Every attempt at interpretation is an exploit waiting to happen.

In YAML (the gift that keeps on giving, see the False/Norway debacle) the last name of Null would have to be quoted, otherwise it would signify the null value.

For other curious people (or in my case, as a curious Norwegian): https://news.ycombinator.com/item?id=36745212
Post reply on HN