The one "good" thing that comes out of this public exploit is that github was the target. Github is obscure enough to non-developers but quite well known in th

The one "good" thing that comes out of this public exploit is that github was the target. Github is obscure enough to non-developers but quite well known in the development circle. This means if you are using github you probably have a damn good idea what the vulnerability is. I'm not a rails developer (mostly python/django) but I get it immediately. This is mostly an issue with the framework helping me shoot myself in the foot. Sure it's in the documentation. But realistically a good framework gives me sensible defaults so I don't have to refer to the documentation. I trust the framework does the "right thing".