George Mauer

Most-linked posts?

1. Dangers of CSV Injection
   6 people · 6 mentions · first linked 2017-10-10
2. Take Home Programming Interviews Suck
   2 people · 2 mentions · first linked 2017-11-07
3. A heck of a wild bug chase
   2 people · 2 mentions · first linked 2024-08-05
4. TDD with No More Tears – How to Use TDD (Ok BDD) Beyond Calculator Tutorials
   2 people · 2 mentions · first linked 2019-12-02
5. /2017/10/07/csv-injection.html
   2 people · 2 mentions · first linked 2025-03-26

What Hacker News says?

1. evnp · 2025-03-26Recommends

   Anyone with a love of CSV hasn't been asked to deal with CSV-injection prevention in an enterprise setting, without breaking various customer data formats. There's a dearth of good resources about this around the web, this is the best I've come across: https://georgemauer.net/2017/10/07/csv-injection.html

   Comment linking /2017/10/07/csv-injection.html

   on “A love letter to the CSV format”
2. rpenm · 2017-10-10

   Submitted Dangers of CSV Injection as a story · 645 points

   HN discussion
3. bigiain · 2017-11-02

   You know you can pop calc with a csv file opened in Excel? from http://georgemauer.net/2017/10/07/csv-injection.html : UserId,BillToDate,ProjectName,Description,DurationMinutes 1,2017-07-25,Test Project,Flipped the jibbet,60 2,2017-07-25,Important Client,"Bop, dop, and giglip", 240 2,2017-07-25,Important Client,"=2+5+cmd|' /C calc'!A0", 240 Yeah - that "=2+5+cmd|' \c calc'!A0" gets Windows to execute code...

   Comment linking /2017/10/07/csv-injection.html

   on “What If OpenDocument Used SQLite?”
4. togakangaroo · 2024-08-08

   Submitted A heck of a wild bug chase as a story · 66 points

   HN discussion
5. sterlind · 2020-12-31Recommends

   Domino's vs. Robles doesn't say you can't use JS. no court ever ordered Domino's to do anything, afaict. all they did was affirm that Robles was allowed to sue Domino's under the ADA (without deciding whether their site was in fact accessible or not.) See http://georgemauer.net/2019/11/04/dominos-v-robles.html for a good breakdown of the rulings. In particular, Robles wanted the court to order Domino's to make their…

   Comment linking /2019/11/04/dominos-v-robles.html

   on “Flash Player is about to stop working on Windows 10”
6. togakangaroo · 2018-09-24

   Submitted Announcing Tech Terms for Memorization as a story · 10 points

   HN discussion
7. roberto · 2021-03-30

   First, there's no specification. Second, this: http://georgemauer.net/2017/10/07/csv-injection.html

   Comment linking /2017/10/07/csv-injection.html

   on “Tar is an ill-specified format (2015)”
8. johnwheeler · 2016-11-29

   Submitted Understanding the State of JavaScript Modules as a story · 7 points

   HN discussion
9. smithkl42 · 2025-11-10

   If your attacker controls the data you're exporting to a CSV file, they can take advantage of a memory safety issue in your CSV exporter to execute arbitrary code on your machine. https://georgemauer.net/2017/10/07/csv-injection.html

   Comment linking /2017/10/07/csv-injection.html

   on “Memory Safety for Skeptics”
10. rfreytag · 2017-12-11

    Submitted Take Home Programming Interviews Suck as a story · 4 points

    HN discussion
11. auxym · 2018-10-08

    > t's getting to the point where simply opening a Microsoft Office document is roughly the same as opening a random .exe file. This isn't exactly new. In fact it was much worse the late 90s / early 00s, the heyday of windows viruses. There was absolutely no security, opening an excel document automatically meant running arbitrary code that had full system access (via COM, etc). Many viruses spread over email by word…

    Comment linking /2017/10/07/csv-injection.html

    on “Call Python functions from VBA in all Microsoft Office apps”
12. MarcellusDrum · 2024-01-29

    Submitted The Underestimated Dangers of CSV Injection as a story · 3 points

    HN discussion
13. notagoodidea · 2024-06-02

    You are in for a whole lot of magical bad ideas :) Also Google Sheets are "vulnerable" to CSV injection [1] too for "here is a link to an evil CSV, import the data yourself" scenario. Honestly if there was a way to Auth (even basic Auth or Bearer) via classic Google Sheets, you could create a monster so easily. [1] http://georgemauer.net/2017/10/07/csv-injection.html

    Comment linking /2017/10/07/csv-injection.html

    on “Reading Google Sheets from a Go Program”
14. gmauer · 2019-12-02

    Submitted TDD with No More Tears – How to Use TDD (Ok BDD) Beyond Calculator Tutorials as a story · 3 points

    HN discussion
15. shakes · 2017-11-07

    Submitted Take Home Programming Interviews Suck as a story · 2 points

    HN discussion
16. kiyanwang · 2016-08-09

    Submitted Predicting the comeback of XHTML as a story · 2 points

    HN discussion
17. mooreds · 2026-07-21

    Submitted FizzBuzz Tier List as a story · 1 points

    HN discussion
18. mooreds · 2024-08-05

    Submitted A heck of a wild bug chase as a story · 1 points

    HN discussion
19. mooreds · 2023-11-23

    Submitted TDD with No More Tears (2019) as a story · 1 points

    HN discussion
20. mooreds · 2023-07-30

    Submitted Get That Coding Job as a story · 1 points

    HN discussion

Search all of HN for georgemauer.net

Linked by the same people?

• KKalzumeus Softwarekalzumeus.com
• JJoel Spolskyjoelonsoftware.com