Hacker News new | ask | show | jobs
by bawolff 2015 days ago
Not to mention that libxmlsec1 has some insane insecure defaults that are effectively undocumented.

(I'd go into more details, but i literally just sent a security report yesterday to a saml library for using it wrong, so i guess i shouldn't post publicly about it until they fix)

1 comments

You probably shouldn't have posted this either.