News for hackers. Stuff that matters.

A comment on Security Notification and Linode Manager Password Reset. Parent comment

Re:Security Notification and Linode Manager Password Reset by ryanlol on Tuesday January 05, 2016 @02:53PM (#10845539)
>we're still doing routine audits of the existing stuff.

This doesn't work, auditing coldfusion code is impossible without auditing the entire platform. The whole platform is so full of bugs and strange behaviour that it's actually impossible to produce secure coldfusion code.

[ Parent | on HN ]
Re:Security Notification and Linode Manager Password Reset by Sir_Cmpwn on Tuesday January 05, 2016 @02:56PM (#10845564)
I can't really deny that CF is that bad, but it'd be irresponsible to just let the codebase rust as we rewrite it - and we are rewriting it.
[ Parent | on HN ]
Re:Security Notification and Linode Manager Password Reset by ryanlol on Tuesday January 05, 2016 @03:03PM (#10845614)
When did you start rewriting it? It doesn't take years to replace this stuff.
[ Parent | on HN ]
Re:Security Notification and Linode Manager Password Reset by ddevault on Tuesday January 05, 2016 @03:08PM (#10845643)
I was hired in July and have been driving most of this effort and we're shipping rewritten versions of some parts of our infra soon™
[ Parent | on HN ]
Re:Security Notification and Linode Manager Password Reset by StavrosK on Tuesday January 05, 2016 @03:36PM (#10845837)
That sounds good, at least, thanks for letting us know.
[ Parent | on HN ]