Hacker News new | ask | show | jobs
by jules 4883 days ago
When bad code happens because the language is a security minefield, blame the language.
1 comments
kibibu 4882 days ago
Such as when things like this happen? http://erratasec.blogspot.com.au/2012/03/rubygithub-hack-tra...
link
jules 4882 days ago
The security vulnerability occurred because of Rails models' mass attribute assignment, which you wouldn't have in a less dynamic language. So yes, that's a problem at least partially attributable to the language.
link