Hacker News Reader

Derek_MKon World of Warcraft: one simple line of code can cost you dearly (2016)

WoW also does similar things to this; see the end of the article. It's good that they specifically relate it to losing items/gold, since many players actually may not make that connection, and may not think the risk is as big as it is.

Derek_MKon JPEG image of Shakespeare which is also a zip file containing his complete works

Yeah, I guess it's possible that it's only checking dimensions instead of actual filesize.

Derek_MKon Google Home (in)Security

> It's a trade off that favors features over security.

I'd say it's moreso a trade off that favors "getting it out the door quickly" over security. It's reasonable that, if you want your app to integrate with a Google Home, you should expect it to be authenticated. Plus, the fact that this API is undocumented seems indicative that 3rd-party integration wasn't the purpose.