Top all-time · #10751
Zweitag
Company blog · zweitag.de/blogprogrammingbusiness
Zweitag is the company blog at zweitag.de, writing about programming and business. Since 2013, 7 different Hacker News readers have linked it 8 times, most often “Ruby on Rails vulnerable to mass assignment and SQL injection”. No feed was found, so read it on the site itself.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers link Zweitag posts for technical detail on Ruby on Rails security issues, such as the JSON gem denial-of-service and unsafe object creation vulnerability. The comments cite them as sources on exploitation.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Partner für digitale Geschäftsmodelle. Gemeinsam konzipieren, entwickeln und gestalten wir Softwareprodukte, die herausragen.
Most-linked posts?
- Ruby on Rails vulnerable to mass assignment and SQL injection3 people · 3 mentions · first linked 2013-02-11
What Hacker News says?
Some details on how this can be exploited: http://www.zweitag.de/en/blog/ruby-on-rails-vulnerable-to-ma...
Comment linking /en/blog/ruby-on-rails-vulnerable-to-mass-assignment-and-sql-injection
on “Denial of Service and Unsafe Object Creation Vulnerability in JSON Gem”Submitted Ruby on Rails vulnerable to mass assignment and SQL injection as a story · 123 points
HN discussionTheir server is down. Here's the content: -- by Rohit Sethi on February 13, 2013 -- http://blog.sdelements.com/author/rohit/ The latest Rails security flaw [1] is example of a common anti-pattern. Ned Batchelder wrote an awesome post [2] explaining how a similar issue may also exist in Python’s YAML parser [3]. Looking at these vulnerabilities, I am reminded of similar flaws in other frameworks and libraries. The is…
Comment linking /en/blog/ruby-on-rails-vulnerable-to-mass-assignment-and-sql-injection
on “Why the Latest Rails Exploit Is Indicative of a Bigger Problem”Submitted Let's build a chat with ActionCable as a story · 2 points
HN discussionSubmitted Building a replicated cache in 65 lines using ConCache and Phoenix.PubSub as a story · 1 points
HN discussionSubmitted A roundup of the ElixirConf.EU 2017 in Bacrelona as a story · 1 points
HN discussionSubmitted SCM as an enabler for quality in software development processes as a story · 1 points
HN discussionSubmitted Webseiten-Optimierung für mobile Endgeräte as a story · 1 points
HN discussion