News for hackers. Stuff that matters.

A comment on Security advisory: Breach and Django.

Re:Security advisory: Breach and Django by danso on Tuesday August 06, 2013 @10:28AM (#6166744)
A few days ago, Meldium's announcement of a Ruby gem that provides an inexpensive partial protection (i.e. not disabling gzip) made it to the HN front page:

http://blog.meldium.com/home/2013/8/2/running-rails-defend-y...

The two protective measures are masking the Rails CSRF token and appending a HTML comment to every HTML doc to slow down plaintext recovery. How easy is this to include in a Django plugin?

[ Parent | on HN ]
Re:Security advisory: Breach and Django by mhurron on Tuesday August 06, 2013 @11:28AM (#6167092)
Is a partial workaround really better than a guaranteed workaround.
[ Parent | on HN ]