News for hackers. Stuff that matters.

A comment on Security advisory: Breach and Django. Parent comment

Re:Security advisory: Breach and Django by homakov on Tuesday August 06, 2013 @10:57AM (#6166898)
since it's attack on secrets then we don't even consider blogs and read only media as targets :)
[ Parent | on HN ]
Re:Security advisory: Breach and Django by steveklabnik on Tuesday August 06, 2013 @11:00AM (#6166922)
Absolutely, I'm just saying that your statement that it's the only must have is factually incorrect. I could include some sort of secret on every page, but since my blog doesn't reflect user input, it would be fine. I could also have a 'search' function that would reflect input, but without the secret in the body, the secret would be fine.

All three parts are a must-have, even if they are incredibly common. Saying otherwise is misleading.

[ Parent | on HN ]