{"id":37249,"date":"2019-10-31T22:16:34","date_gmt":"2019-10-31T19:16:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/ne-shutite-s-null\/"},"modified":"2019-10-31T22:16:34","modified_gmt":"2019-10-31T19:16:34","slug":"ne-shutite-s-null","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/ne-shutite-s-null","title":{"rendered":"\u00c4rge naljatage NULL-iga","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A worthy Friday story unfolded with American security researcher Joseph Tartaro. He wanted to stand out by ordering not just a personalized license plate, but also linking it to his profession. His first thought was to play around with SEGFAULT or something similar. However, he ultimately settled on the plate NULL for his car and VOID for his wife. Did you sense something amiss? Read on to find out how this innocent prank turned into a saga, another quirky Mister Null, and the lessons about bugs in data type checks from user input.<\/p>\n

\"\u00c4rge<\/a><\/noindex><\/p>\n

So, in 2016, our programming joker received his brand new humorous license plates and surely rubbed his hands gleefully. He even hoped that this move would spare him from speeding tickets. Not that he broke the law significantly, but the idea of breaking the system like this seemed quite interesting to a security expert.<\/p>\n

Problems began a year later when he tried to renew his plates online. This confused the designated website immensely.<\/p>\n

\"\u00c4rge
\n
\nThe system deemed the number he entered as invalid. The programmers messed up somewhere, and the NULL he entered as a string value was apparently checked incorrectly. A loose type-checking error? Nonetheless, he managed to renew the plate for a year using the code in the link, and somewhat later he forgot about all of it.<\/p>\n

However, as it turned out, this was far from the end of his troubles. The story then resembled an old joke:<\/p>\n

A soldier in the middle of a field is trying to somehow repair a track that fell off a tank. Suddenly, out of nowhere, a fairy appears and asks:
\n \u2014 What are you up to, soldier?
\n \u2014 Well, I'm struggling a bit.
\n \u2014 Want to do it properly?
\n \u2014 (dreamily) I want to\u2026
\nThe fairy waved her wand\u2026 And the tank's turret fell off.<\/p><\/blockquote>\n

\nNii et, 2018. aasta alguses sai ta t\u00e4iesti teenitud trahvi summas $35. Ta oleks v\u00f5inud selle vaidlustada, kuid maksta oli lihtsam, summa ei olnud suur. Ja siis lehvitas haldjas oma v\u00f5lukeppi... Ja tema postkasti sadasid trahvid tasumata parkimise, valeparkimise ja muu sellise eest. K\u00fcmnetest ja k\u00fcmnetest trahvidest summades $37, $60, $74, $80... Erinevatest California nurkadest. Erinevate automudelite t\u00f5ttu. \u00dcks h\u00e4lve t\u00fc\u00fcpimisv\u00f5imekontrollis seostas NULL v\u00e4\u00e4rtuse tema isikuandmetega. Ja iga kord, kui tubli korrakaitsja unustas trahvi v\u00e4lja kirjutades auto numbri s\u00fcsteemi sisestada, l\u00e4ks auhind meie kangelasele (siinkohal v\u00f5iks n\u00fcpeldada ka frontendi arendajaid, et nad ei olnud kontrollinud \u00fche v\u00f5tmeparameetri t\u00e4itmist).<\/p>\n

Mingi hetk sai ta kaks trahvi, mis olid v\u00e4lja kirjutatud samas kohas mitme tunni vahega t\u00e4iesti erinevatele autodele. T\u00e4iendava \u00f5nne saavutamiseks rakendati talle retrospektiivselt vanu trahve, millel ei olnud numbrit. Nii sai ta isegi trahvid, mis kuulusid aastasse 2014, mil tal ei olnud isegi seda numbrit. L\u00f5puks tekkis tal \u00fcle $12000 ulatuses trahve.<\/p>\n

\"\u00c4rge
\n
\nParkimistrahvidega tegeles erafirma Citation Processing Center. Loomulikult v\u00f5ttis Joseph nendega \u00fchendust ja p\u00fc\u00fcdis olukorda selgitada. Loomulikult oli telefonimanagers\u00f5bralikkus, kuid palus neil saata neile tagasi t\u00f5endite koopiad, et nad saaksid seal olukorra \u00fcle vaadata. Kuid see t\u00e4hendaks ainulaadse p\u00fcsiva koopia kaotamist, mis kinnitas trahvi vale v\u00e4ljakirjutamist. Ja h\u00e4sti, et ta ei saatnud. Hiljem m\u00e4rkas ta, et veebis saadaval olevas avatud trahvide andmebaasis oli algne automudel asendatud tema omaga. Veel \u00fcks vooru vestlusi managereid, sama kasutu.<\/p>\n

L\u00f5puks pidi ta otse DMV (Department of Motor Vehicles, transpordi registreerimisega tegeleva riigiasutuse) poole p\u00f6\u00f6rduma ning nende abiga \u00f5nnestus tal \u00fcsna kiiresti summa 6262 $ v\u00f5rra v\u00e4hendada, kuid see ei lahendanud algset probleemi. Uusi trahve j\u00e4tkuvalt laekus. Originaali artikli kirjutamise ajal Wiredis olid tasumata kaks trahvi kokku 140 $. Mis k\u00f5ige kurvem, DMV keeldub temalt numbrite pikendamisest j\u00e4rgmiseks aastaks, kuni trahvid on tasutud. Veelgi enam, ei ole selge, kuhu minna ja kellele \u00fctelda, et see probleem lahendada. DMV m\u00e4rgib, et nende s\u00fcsteem tuvastab \u00f5igesti tema numbrid ja m\u00f5istab olukorra absurdsust. Kuid parkimisk\u00fcsimustega tegelevad kohalikud ametiv\u00f5imud, millele nad ei saa kuidagi m\u00f5ju avaldada. Seet\u00f5ttu v\u00f5ib lugu veel j\u00e4tkuda. Nali torunes.<\/p>\n

Hr. Null<\/h2>\n

\nChristopher Null'il (Kristopher Null) l\u00e4ks veel halvemini. Tal on halba \u00f5nne s\u00fcnniga sellise perekonnanimega. Kui Joseph Tartaro kannatab ainult trahvide all ja vaid umbes aasta, siis Christopher sukeldub pidevalt s\u00fcgavamale kannatuste kuristikku koos digitaaltehnoloogiate arenguga.<\/p>\n

Eriti ebamugavust toob talle laialdaselt levinud MVP (minimum viable product, minimaalne eluj\u00f5uline toode) m\u00f5isted, mis m\u00f5nel juhul kattuvad otsekohe \u00abh\u00e4rrah-h\u00e4rrah ja tootmisse\u00bb kontseptsiooniga.<\/p>\n

Kui isegi j\u00e4tta k\u00f5rvale k\u00f5ik algtaseme naljad tema perekonnanime \u00fcle ning s\u00fc\u00fcdistused katsetes seel\u00e4bi t\u00e4helepanu t\u00f5mmata (mis on hea meetod, kui oled tehniline ajakirjanik, nagu Christopher), siis kummalised asjaolud tekivad teatud veebisaitide ja rakendustega t\u00f6\u00f6tamisel.<\/p>\n

Christopheri v\u00e4itel t\u00f6\u00f6tlevad enamiku veebisaitide s\u00fcsteem perekonnanime Null \u00f5igesti. M\u00f5ned teatavad, et v\u00e4li ei saa olla t\u00fchi v\u00f5i et see on reserveeritud s\u00f5na. Harvadel juhtudel rakendused lihtsalt kokku kukuvad. Huvi p\u00e4rast on ta m\u00e4rganud, et mida suurem on ettev\u00f5te, kes rakenduse v\u00f5i saidi taga seisab, seda rohkem on probleeme tema perekonnanimega.<\/p>\n

Eraldi r\u00f5\u00f5mustab tema andmete filtreerimine, mis eemaldab Null juba salvestatud andmetest. Nii juhtub, et ta saab kirju Media LLC aadressile (samal ajal kui ettev\u00f5tte nimi on Null Media LLC), aga m\u00f5nikord p\u00f6\u00f6rdutakse temaga lihtsalt kui \"Hr.\" spammis. Tal tuli isegi v\u00e4lja t\u00f6\u00f6tada \u00fcmbers\u00f5idud. N\u00e4iteks, sisestades teise nime v\u00f5i initsiaali samasse v\u00e4ljade perekonnanimega v\u00f5i lihtsalt lisades punkti l\u00f5ppu. Aga m\u00f5nikord on s\u00fcsteemi jonn \u00fcletamatu.<\/p>\n

Nii keeldus Bank of America t\u00e4ielikult vastu v\u00f5tmast tema e-kirja null@nullmedia.com. Nende s\u00fcsteem lihtsalt keeldus aktsepteerimast nulli kasutajanime osas, tuli isegi luua alias info@ spetsiaalselt panga jaoks. Aga pangasoftware arenes aktiivselt ja m\u00f5ne aasta p\u00e4rast... ei aktsepteerinud nulli isegi domeeninime osana. Vaesel mehel tuli luua tavaline Gmaili konto, mis sisaldas samuti nulli, kuid mitte kasutajanime alguses.<\/p>\n

Kas olete sattunud m\u00f5nele naljakale olukorrale s\u00fcsteemsete v\u00e4\u00e4rtuste t\u00f6\u00f6tlemisel? Jagage oma kogemusi kommentaarides.<\/p>\n

Ait\u00e4h, et olete meiega. Kas teile meeldivad meie artiklid? Kas soovite n\u00e4ha rohkem huvitavat sisu? Toetage meid tellimuse esitamise v\u00f5i tuttavatele soovitamisega, 30% allahindlus Habr'i kasutajatele ainulaadsele sissetuleku tasemel serverile, mille oleme teie jaoks v\u00e4lja m\u00f5elnud:<\/b> Kogu t\u00f5de VPS (KVM) E5-2650 v4 (6 tuuma) 10GB DDR4 240GB SSD 1Gbps alates $20 v\u00f5i kuidas \u00f5igesti serverit jagada?<\/a><\/noindex> (saadaval RAID1 ja RAID10 variandid, kuni 24 tuuma ja kuni 40GB DDR4).<\/p>\n

Dell R730xd kaks korda odavam?<\/b> Ainult meie juures 2 x Intel TetraDeca-Core Xeon 2x E5-2697v3 2.6GHz 14C 64GB DDR4 4x960GB SSD 1Gbps 100 TB alates $199<\/a><\/noindex> Hollandis! Dell R420 \u2014 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB \u2014 alates $99!<\/b><\/b> Lugege sellest Kuidas luua ettev\u00f5tte tasemel infrastruktuuri, kasutades Dell R730xd E5-2650 v4 servereid, mille hind on 9000 eurot, taskukohase hinna eest?<\/a><\/noindex>
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043e\u0441\u0442\u043e\u0439\u043d\u0430\u044f \u043f\u044f\u0442\u043d\u0438\u0446\u044b \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u0438\u043a\u043b\u044e\u0447\u0438\u043b\u0430\u0441\u044c \u0441 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0414\u0436\u043e\u0437\u0435\u0444\u043e\u043c \u0422\u0430\u0440\u0442\u0430\u0440\u043e (Joseph Tartaro). \u0417\u0430\u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0435\u043c\u0443 \u0432\u044b\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f, \u0437\u0430\u043a\u0430\u0437\u0430\u0432 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0438\u043d\u0434\u0438\u0432\u0438\u0434\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u043d\u043e\u043c\u0435\u0440 \u043d\u0430 \u0430\u0432\u0442\u043e, \u043d\u043e \u0438 \u0441\u0432\u044f\u0437\u0430\u0432 \u0435\u0433\u043e \u0441\u043e \u0441\u0432\u043e\u0438\u043c \u0440\u0435\u043c\u0435\u0441\u043b\u043e\u043c. \u041f\u0435\u0440\u0432\u043e\u0439 \u043c\u044b\u0441\u043b\u044c\u044e \u0431\u044b\u043b\u043e \u043f\u043e\u0438\u0433\u0440\u0430\u0442\u044c\u0441\u044f \u0441 SEGFAULT \u0438\u043b\u0438 \u0447\u0435\u043c-\u0442\u043e \u0432\u0440\u043e\u0434\u0435 \u044d\u0442\u043e\u0433\u043e. \u041d\u043e \u0432 \u0438\u0442\u043e\u0433\u0435 \u043e\u043d \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0441\u044f \u043d\u0430 \u043d\u043e\u043c\u0435\u0440\u0435 NULL \u0434\u043b\u044f \u0441\u0432\u043e\u0435\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0438 VOID \u0434\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27935,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-37249","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00c4rge nalja tehke NULL-iga | ProHoster","description":"Kaval reede lugu juhtus Ameerika k\u00fcberjulgeoleku uurija Joseph Tartaro'ga.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/ne-shutite-s-null","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0435 \u0448\u0443\u0442\u0438\u0442\u0435 \u0441 NULL | ProHoster","og:description":"\u0414\u043e\u0441\u0442\u043e\u0439\u043d\u0430\u044f \u043f\u044f\u0442\u043d\u0438\u0446\u044b \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u0438\u043a\u043b\u044e\u0447\u0438\u043b\u0430\u0441\u044c \u0441 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0414\u0436\u043e\u0437\u0435\u0444\u043e\u043c \u0422\u0430\u0440\u0442\u0430\u0440\u043e (Joseph Tartaro).","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/ne-shutite-s-null","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:16:34+00:00","article:modified_time":"2019-10-31T19:16:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37249","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 16:57:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:25:10","updated":"2026-01-23 16:57:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/37249","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=37249"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/37249\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/27935"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=37249"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=37249"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=37249"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}