Re:I think tumblr has a huge security hole
by powdahound on Saturday March 19, 2011 @10:58AM
(#2343732)
Well, a single character change + a developer not testing their code locally + not running high level unit tests + deploying untested code to production.
[ Parent
| on HN ]
Re:I think tumblr has a huge security hole
by datasink on Saturday March 19, 2011 @12:12PM
(#2343914)
Tumblr has at least one full time sysadmin. I think it's more reasonable to suppose he made the change to a production config file, rather than a developer. A definite failing in their deployment process, but it really says nothing about the quality of the application code or developer testing.