Re:Security hole found in Rails 2.3's http_authentication.rb
by jrockway on Wednesday June 03, 2009 @09:45PM
(#640808)
Stop attacking the guy, it's really poor form. Just admit you guys screwed up and move on.
Sounds like Zed's analysis of the Rails community is still correct.
Re:Security hole found in Rails 2.3's http_authentication.rb
by _pius on Wednesday June 03, 2009 @09:47PM
(#640812)
As someone who loves Rails, I'd hate to think that.
Re:Security hole found in Rails 2.3's http_authentication.rb
by zcrar70 on Thursday June 04, 2009 @07:44AM
(#641237)
Yup - I'm amazed. The Rails community has gotten some flack for this kind of issue before, but rather than listen to the criticism and learn from it, they make the same mistake over and over.
It's as if they feel that Rails is a direct product of their personalities, and that because Rails is so successful, anything they do is vindicated by that success. That's just the wrong approach.
No, he assumed incompetence, which you seem to be intent on proving by continuing to attack him and give this non-apology apology.
Had you taken a few minutes to check before doing this, we'd all have been better off.
Or you could've resolved this a week ago had you had a more mature process. The guy laid out the issue, presented a fix, and e-mailed you and the rest of the Core Team several times. How many more "few minutes" does he need to take before it stops being his fault in your opinion?
Stop attacking the guy, it's really poor form. Just admit you guys screwed up and move on.