On Tue, Mar 6, 2012 at 8:58 AM, Dena Dragos <[email protected]> wrote:
> On Tue, Mar 6, 2012 at 1:54 PM, Rodolfo S. Carvalho
> <[email protected]> wrote:
>> Nice Job, Adriano!
>>
>> On Mon, Mar 5, 2012 at 2:17 PM, Francesco Piccinno <[email protected]> 
>> wrote:
>>> That's what I was been waiting for :) Just awesome.
>>> With this move we will attract more contributors and gain visibility!
>>
>> Agreed. Github is such an amazing tool.
>
> Ye, except when stuff like this happens [1] :P.

This is why they are moving to a non-rails solution :)

Anyways, we are subjected to exploits everywhere, I think we should
weight the pros and cons. Github has such great tools for documenting
the project, and also their code revision tool is excellent.

>
> Quoting:
> "On Sunday morning, 4 March, Egor Homakov exploited a flaw in how the
> Ruby on Rails web framework handles mass assignments that allowed him
> to write a posting, delete a posting or push changes into source code
> on any GitHub project"
>
> [1] 
> http://www.h-online.com/security/news/item/GitHub-security-incident-highlights-Ruby-on-Rails-problem-1463207.html



-- 
    Rodolfo Carvalho
     Web Developer
[email protected]

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
Umit-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/umit-devel

Reply via email to