News for hackers. Stuff that matters.

A comment on Security hole found in Rails 2.3's http_authentication.rb. Parent comment

Re:Security hole found in Rails 2.3's http_authentication.rb by jrockway on Wednesday June 03, 2009 @09:45PM (#640808)
Stop attacking the guy, it's really poor form. Just admit you guys screwed up and move on.

Sounds like Zed's analysis of the Rails community is still correct.

[ Parent | on HN ]
Re:Security hole found in Rails 2.3's http_authentication.rb by _pius on Wednesday June 03, 2009 @09:47PM (#640812)
As someone who loves Rails, I'd hate to think that.
[ Parent | on HN ]
Re:Security hole found in Rails 2.3's http_authentication.rb by zcrar70 on Thursday June 04, 2009 @07:44AM (#641237)
Yup - I'm amazed. The Rails community has gotten some flack for this kind of issue before, but rather than listen to the criticism and learn from it, they make the same mistake over and over.

It's as if they feel that Rails is a direct product of their personalities, and that because Rails is so successful, anything they do is vindicated by that success. That's just the wrong approach.

[ Parent | on HN ]
Re:Security hole found in Rails 2.3's http_authentication.rb by gommm on Thursday June 04, 2009 @10:01AM (#641371)
And this is why I loved merb and I'm still not sure the merge was a good thing....
[ Parent | on HN ]