News for hackers. Stuff that matters.

A comment on Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3. Parent comment

Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 by navyrain on Monday January 28, 2013 @05:36PM (#5131175)
Hardly the same. Lets not kid ourselves into thinking any of the popular software we use is bug-free, which is nigh impossible feat for any large codebase. If this rails bug had not been discovered, it would still be there.
[ Parent | on HN ]
Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 by sandofsky on Monday January 28, 2013 @05:58PM (#5131282)
Who said software is bug free?

The issue is that similar projects, with similar success, with a similar number of developers looking at them, have fewer severe vulnerabilities.

The simplest explanation is that one project has more vulnerabilities lying dormant.

[ Parent | on HN ]