Hacker News Reader

I recall hearing somewhere that sqlite isn't hardened against opening maliciously crafted database files; can anyone substantiate it? If so, that would make this a lot less compelling.

View on HN

Opening and querying untrusted SQLite database can lead to (remote) code execution. Original research at https://research.checkpoint.com/2019/select-code_execution-f...

That's a great writeup; the fact that a view can transform any known static query into an attacker-chosen SELECT makes the attack surface huge.

Reply on news.ycombinator.com