News for hackers. Stuff that matters.
Re:Hacked: commit to rails master on GitHub by arturadib on Sunday March 04, 2012 @01:10PM (#3663339)
Time from exploit to fix in production: < 1h. On a Sunday morning.

I'd buy Github stock if I could.

Re:Hacked: commit to rails master on GitHub by pyre on Sunday March 04, 2012 @01:13PM (#3663353)
It doesn't hurt that the vulnerability was already discussed in a bug report by the 'attacker.' I'd imagine it would have taken a longer time had they needed to track down how exactly this happened, though I guess I'm making an assumption on what their logging/auditing/reporting is like.
Re:Hacked: commit to rails master on GitHub by jberryman on Sunday March 04, 2012 @01:56PM (#3663527)
Right, I'm kind of baffled by the posters on the bug report calling this a "0-day" exploit.
Re:Hacked: commit to rails master on GitHub by sausagefeet on Sunday March 04, 2012 @02:54PM (#3663730)
At the very least you'd probably be getting it on the cheap at that point.