Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> I would gladly take the other side of that bet.

You admit that the framework you used had a couple of exploits and you were not affected because you turned of all features that you didn't need. The current rails vulnerability does not affect you if you turned off all features you didn't need. Same argument. So we have a hole in Mason, I already cited one in Spring, someone else cited one in .NET http://news.ycombinator.com/item?id=5043839.



Not the framework, the Apache webserver. I am not aware that there has ever been a hole in Mason, and I would be surprised if there was.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: