You're right, sorry, I've been in a terribly bitter mood lately and I'm not proud of this comment I hadn't read this post yet, it sure is alarming but I trust

You're right, sorry, I've been in a terribly bitter mood lately and I'm not proud of this comment I hadn't read this post yet, it sure is alarming but I trust the ruby/rails community in the sense that it was always pretty fast to adopt, reject and take action on things and that it will keep this relative efficiency, specially against problems like these so at least this is something we can trust, I guess. As for Django, go for it... it's just that this problems look really ugly in hindsight... 3 months ago it probably was, for most people, that Rails had most of good security stuff built right in, it can happen in another framework, in linux, or ubuntu next, that sort of thing...