News for hackers. Stuff that matters.

A comment on Drupal Core – Highly Critical Public Service announcement. Parent comment

Re:Drupal Core – Highly Critical Public Service announcement by snowwrestler on Wednesday October 29, 2014 @04:01PM (#8529531)
Just because you have not found vulnerabilities, it does not mean they do not exist. This Drupal vulnerability sat there for a while before a security code audit found it.

What are you using to build sites now? When was the last time the codebase was audited by a security firm? There might be bullets out there for you...

[ Parent | on HN ]
Re:Drupal Core – Highly Critical Public Service announcement by sarciszewski on Thursday October 30, 2014 @09:08AM (#8532663)
Exactly. Not enough eyes on enough code these days. I've found obvious bugs in almost every framework or CMS I examined so far :)
[ Parent | on HN ]