Public Key Security Vulnerability and Mitigation

Re:Public Key Security Vulnerability and Mitigation by polemic on Sunday March 04, 2012 @06:56PM (#3664653)

Yep, this bothers me too. attr_accesible is to Rail's what magic_quotes_gpc was to PHP: a terribly misconceived 'helper' feature that is almost designed to trip up beginners in the worst way.

Of course, that GitHub should get caught by it is alarming.

[ Parent | on HN ]

Re:Public Key Security Vulnerability and Mitigation by javascriptlol on Sunday March 04, 2012 @10:35PM (#3665292)

Even with good knowledge of a system people forget things. The blame for this incident falls 100% on rails and its awful design. It's like blaming the driver for crashing your car whose brakes can silently and unpredictably fail unless you press some button when you first get into the car. Critical failure points should be isolated aggressively. Many software "engineers" have not yet grasped this.

[ Parent | on HN ]

Re:Public Key Security Vulnerability and Mitigation by heretohelp on Sunday March 04, 2012 @08:35PM (#3664971)

I haven't heard a single kind thing about GitHub's code from people who've deployed their FI, or more recently, enterprise product.

They've got some talented people, but I'm guessing from their posts speaking of how they work that they don't have much in the way of code review.

[ Parent | on HN ]