Top all-time · #14023
blog.sdelements.com
Company blog · blog.sdelements.comsecuritybusiness
blog.sdelements.com is the company blog at blog.sdelements.com, writing about security and business. Since 2013, 5 different Hacker News readers have linked it 10 times. No feed was found, so read it on the site itself.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link this post on the Rails YAML security flaw as an example of a recurring anti-pattern in frameworks and libraries. The comment reposts its text and points to a similar issue in Python's YAML parser.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
What Hacker News says?
Their server is down. Here's the content: -- by Rohit Sethi on February 13, 2013 -- http://blog.sdelements.com/author/rohit/ The latest Rails security flaw [1] is example of a common anti-pattern. Ned Batchelder wrote an awesome post [2] explaining how a similar issue may also exist in Python’s YAML parser [3]. Looking at these vulnerabilities, I am reminded of similar flaws in other frameworks and libraries. The is…
Comment linking /raising-the-bar-on-application-security-due-diligence/
on “Why the Latest Rails Exploit Is Indicative of a Bigger Problem”Submitted MongoDB remote command execution vulnerability: nightmare or eye opener? as a story · 70 points
HN discussionSubmitted Why the Latest Rails Exploit Is Indicative of a Bigger Problem as a story · 61 points
HN discussionSubmitted Takeaways from the 2013 Verizon Data Breach Report for Development Teams as a story · 7 points
HN discussionSubmitted Why HTC's Settlement is a Game Changer for Secure Development as a story · 6 points
HN discussionSubmitted Why remediating assessment results might be harmful to your business as a story · 5 points
HN discussionSubmitted How to Handle Complex Non-Functional Requirements in Agile Projects as a story · 5 points
HN discussionSubmitted Debunking Myths: Penetration Testing is a Waste of Time as a story · 3 points
HN discussionSubmitted Why you shouldn’t use the OWASP Top 10 as software security requirements as a story · 3 points
HN discussion