Kaminsky, the famous security researcher, launched a startup – introducing Interpolique as the first product
Interpolique — which was released for security experts and IT to poke around at and analyze, but not to use operationally — is basically a framework that lets developers continue to write code the way they always have, but with a tool that helps prevent them from inadvertently leaving string injection flaws in their code. It requires developers to use different prefixes that describe variables of the strings, without requiring any major changes to their coding style, he says. And the resulting code is automatically formatted in such a way that can’t be easily abused by the bad guys.
