Top all-time · #12474
polyfloyd's stuff
Personal blog · polyfloyd.net/postprogrammingsystems
polyfloyd's stuff is a personal blog at polyfloyd.net about programming and systems. Since 2017, 6 different Hacker News readers have linked it 7 times, most often “Compile Time Prevention of SQL-Injections in Rust”. It is still writing: the last post was on 2025-12-21, and you can follow it by feed.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN commenters bring up this blog's posts on injection bugs, discussing safer API designs such as placeholder-only query interfaces and a FormatString class to prevent Log4j-style and SQL injection flaws.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Compile Time Prevention of SQL-Injections in Rust2 people · 3 mentions · first linked 2018-05-22
- Rendering OpenGL shaders to a LED-Cube2 people · 2 mentions · first linked 2018-02-23
What Hacker News says?
I think you’re right but also showing where a more secure design could solve it just like we’ve seen for SQL injection. The problem is that the first parameter can either be a format string or data. If the signature was different so it only used instances of a FormatString class to get dynamic behavior, this problem would be avoided, but I’m sure a lot of people would complain about the extra typing. What’d be reall…
Comment linking /post/compile-time-prevention-of-sql-injections/
on “Log4j RCE Found”Submitted Compile Time Prevention of SQL-Injections in Rust as a story · 56 points
HN discussionThe lowest level improvement: make the default query interface support placeholders, use that everywhere in the documentation, and examples. Don’t use string concatenation anywhere except examples marked as high-risk. More advanced, 90s Perl style: setup something like a taint bit on outside variables which has to be cleared using an escape function to avoid an error. OOP variant: A class system could be used to mak…
Comment linking /post/compile-time-prevention-of-sql-injections/
on “Google results for PHP tutorials contain SQL injection vulnerabilities”Submitted How Rust Helps You Prevent Bugs as a story · 5 points
HN discussionSubmitted Rendering OpenGL shaders to a LED-Cube as a story · 3 points
HN discussionSubmitted I made MPD index SoundCloud, here's how I did it as a story · 1 points
HN discussionSubmitted Rendering OpenGL shaders to a LED-Cube as a story · 1 points
HN discussion