4 ms·
> However, publishing database.yml on pastie is TOTALLY 100% NOT COOL ... This whole thing is a joke, from the ridiculously unsafe YAML parser to the response
by pifflesnort 14y ago
> However, publishing database.yml on pastie is TOTALLY 100% NOT COOL ...
This whole thing is a joke, from the ridiculously unsafe YAML parser to the response of the RubyGems people.
If these are your community social norms, then you quite simply deserve the resulting shake-up. This is how you become inoculated against such incredibly poor engineering practices.
- judofyr 14y agoI don't quite get what you're trying to say. What "community social norms"? Are you talking about how rubygems.org handled this vulnerability from the beginning? How the community handled this incident after it happened? And what does it have to do with my quote? I was just pointing out that in general I'm for PoC to highlight security issues when the vendor doesn't respond, but stealing database.yml makes you nothing more than a simple crook.