Re:Update Rails or not – security issues either way
by locofacetwice on Monday April 01, 2013 @10:42AM
(#5473293)
Or don't use Rails.
[ Parent
| on HN ]
Re:Update Rails or not – security issues either way
by myke_cameron on Monday April 01, 2013 @11:29AM
(#5473639)
No matter your stack, you are occasionally going to have to deal with security vulnerabilities. Thankfully, rails at least is quick to issue releases which address security vulnerabilities. Back when I was working on java applets, I remember security issues in Java plugins which would persist for weeks, months, or even years.
Re:Update Rails or not – security issues either way
by tptacek on Monday April 01, 2013 @11:20AM
(#5473561)
Or Linux, or MySQL.
Re:Update Rails or not – security issues either way
by bradleyland on Monday April 01, 2013 @01:37PM
(#5474575)
Or Postgres.
Re:Update Rails or not – security issues either way
by tptacek on Monday April 01, 2013 @01:45PM
(#5474628)
My subtext isn't very clear: there are other projects that haven't totally mastered handling vulnerabilities, but few people will fault you for using them. Rails is different because it has a personality cult, which makes it easy to personalize an issue that is a dry inconvenience for other popular packages.
I'm not sure I'd put Postgres alongside Linux and Rails in terms of handling security issues.
Re:Update Rails or not – security issues either way
by static_typed on Monday April 01, 2013 @10:52AM
(#5473376)
^^ This is good advice. Maybe they should question their choice of platform - there are other options, some of which seem to have had a bit more forethought in their architecture and engineering.
Remember: Ruby/Rails to pose, Python for pros.
Re:Update Rails or not – security issues either way
by sbank on Monday April 01, 2013 @11:05AM
(#5473470)
> Remember: Ruby/Rails to pose, Python for pros.
How mature.
Re:Update Rails or not – security issues either way
by stephenhuey on Monday April 01, 2013 @11:14AM
(#5473510)
...and whitespacephiles. :)