News for hackers. Stuff that matters.

A comment on What The Rails Security Issue Means For Your Startup. Parent comment

Re:What The Rails Security Issue Means For Your Startup by tomjen3 on Friday February 01, 2013 @06:51PM (#5154334)
The OP specifically mentioned that a similar bug was found in Django, and had previously been found in another big java framework.

I understand the appeal of "magic" to solve issues when you are under a deadline. It is just that trusting it is dangerous.

[ Parent | on HN ]
Re:What The Rails Security Issue Means For Your Startup by SilasX on Friday February 01, 2013 @08:34PM (#5154723)
I checked the article, and that bug was similar in the relevant sense. It was a security bug related to hashed messaged authentication codes, a class of security exploits related to very non-trivial issues in cryptography. It was not comparable to "let's allow an information-file parser to execute arbitrary attacker code".
[ Parent | on HN ]