Skip to content

Comment on How github was hacked

Comments

To be honest, mass assignment sounds like Rails' own "register_globals". The default should be conservative and disallow setting any fields, instead of allowing anything to be changed.

Early PHP is exactly what came to mind when I read the description.

Nothing new under the sun.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.