News for hackers. Stuff that matters.

A comment on A routine gem update ended up creating $73k worth of subscriptions. Parent comment

Re:A routine gem update ended up creating $73k worth of subs... by chucke on Saturday January 08, 2022 @04:04AM (#29849945)
Java and log4j would like a word with you.
[ Parent | on HN ]
Re:A routine gem update ended up creating $73k worth of subs... by jorams on Saturday January 08, 2022 @07:28AM (#29851036)
The problem with log4j is that they didn't introduce a breaking change, allowing vulnerable functionality the maintainers already considered problematic to stick around.
[ Parent | on HN ]