2 ms·
I think you vastly overestimate the difficulty of getting a code execution bug on Rails relative to the resources of a nation-state. You don't need to do anyth
by patio11 14y ago
I think you vastly overestimate the difficulty of getting a code execution bug on Rails relative to the resources of a nation-state. You don't need to do anything remotely suspicious; just hire vulnerability researchers. They're ridiculously cheaper than aircraft carriers.
Or, to put it another way, anybody with $20k can uncover an RCE in Rails without needing to suborn any community member.
- tptacek 14y ago$20k is too low, but your point stands.