3 ms·

It was mentioned on this thread, 2 hours ago: https://news.ycombinator.com/item?id=6082212 https://news.ycombinator.com/item?id=6082212 This link points to th

It was mentioned on this thread, 2 hours ago: https://news.ycombinator.com/item?id=6082212 https://news.ycombinator.com/item?id=6082212 This link points to the top comment on another thread (which has more points and comments as of now) about the Dev Website outage.

est 13y ago
yeah but the reaction was vastly different. I remember the last RoR exploit was quite a thing on HN few months ago. But not this Struts 2 one. Tip: if you see some URL end with .action, it's propably Struts 2 and vunlerable to S2-012, S2-015 and S2-016 such. Besides, apple.com was hacked as early as in May using similar Struts2 exploits.
- makomk 13y ago
  I don't think Struts is nearly as popular with the HN community as RoR
  - rimantas 13y ago
    IIRC when YAML exploits were announced it was quite popular to call rubyists incompetent amateurs.
    - pohl 13y ago
      Stating and/or implying that others are less competent than our idealized selves is what this community loves to do most. Any particular tech is incidental.