• 0 Posts
  • 11 Comments
Joined 5 months ago
cake
Cake day: June 23rd, 2024

help-circle

  • You’d think so. But at least Germany struggles massively with missing personnel to staff trains (which includes roles beyond the driver). As far as I know there is no automated solution on the horizon for any form or scale of train traffic. The only self driving trains I have experienced require tight control of the rail environment (entirely underground or lifted above the surface) and special stations with airlocks.

    Maybe there is just more money in self-driving cars. But I’m pretty sure they will happen before wide spread automated trains. Which sucks.










  • Unless I’m missing something, the post is plain wrong in some parts. You can’t POST to a Cross-Site API because the browser will send a CORS preflight first before sending the real request. The only way around that are iirc form submits, for that you need csrf protection.

    Also the CORS proxy statement is wrong if I don’t misunderstand their point. They don’t break security because they are obviously not the cookie domain. They’re the proxy domain so the browser will never send cookies to it.

    Anyways, don’t trust the post or me. Just read https://owasp.org/ for web security advice.