News for hackers. Stuff that matters.

A comment on Security advisory: Breach and Django. Parent comment

Re:Security advisory: Breach and Django by homakov on Tuesday August 06, 2013 @10:42AM (#6166822)
Rails is not vulnerable to cookie forcing btw. But your authentication can be (Devise bug http://blog.plataformatec.com.br/2013/08/csrf-token-fixation... )
[ Parent | on HN ]

There are no comments on this comment yet.