Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences

Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences - Slashdot

Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences

This one is quite a serious flaw, and the data this website in question deals with is very important data (citizen IDs), so I'm not surprised they're taking it seriously. The service being down for a day or two is probably better than millions of ids getting hacked. Perhaps the fix breaks something on their website, and they have to fix that before they can take it back up again? It has produced issues like this I think: https://github.com/rails/rails/issues/8831 [github.com] Most sites (like Slashdot) really don't matter if they are hacked and could just stay up, but something dealing with identity like this deserves special attention, and I'm sure they have good reasons if they have taken the site down while they look at workarounds. Perhaps it'll mean they get more money devoted to securing the site after this has blown over - time spent testing the site and looking at ...

Full article: http://it.slashdot.org/story/13/01/09/1557235/ruby-on-rai...

Tweets

@megancarriker » 12 Jan '13, 3pm
Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences [link] via @slashdot
@mthusain » 11 Jan '13, 2pm
Oh my! This is scary! “@slashdot: Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences [link]”
@gullevek » 11 Jan '13, 1am
The dutch had to take down their digital id server thanks to the RoR sql injection bug, le lulz ensures: [link]
@pogelwerfer » 10 Jan '13, 1am
@NiceSirotaSan こんな感じです。 [link]
@matthewpoer » 10 Jan '13, 12am
RT @jmertic: Way to go Ruby On Rails, now you've angered a whole bunch of Dutch folk... [link]
@JapanTechFeeds » 09 Jan '13, 11pm
Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences - Slashdot：vikingpower writes "As a previous stor.. [link]
@ThomasHaeberlen » 09 Jan '13, 8pm
Oops: Dutch national digital ID service was taken offline due to a SQL injection vulnerability in Ruby on Rails [link]
» 09 Jan '13, 7pm
RT @JamesAJohns: Just trying to imagine the fuss the Open Source brigade would make about similar failings in proprietary sw... [link]
@jmertic » 09 Jan '13, 7pm
Way to go Ruby On Rails, now you've angered a whole bunch of Dutch folk... [link]
@JamesAJohns » 09 Jan '13, 7pm
Just trying to imagine the fuss the Open Source brigade would make about similar failings in proprietary sw... [link]
@FighterHayabusa » 09 Jan '13, 5pm
Hold on, people actually use Ruby for real stuff in real life? o_O [link] #sarcasm #mindblown #myproglangisbetterthanyours
@koos_van_staden » 09 Jan '13, 5pm
RT @slashdot Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences [link] @EttienneM
@RogerKemp » 09 Jan '13, 5pm
"@slashdot: Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences [link]" #digid #manmanman
@jvw1954 » 09 Jan '13, 5pm
"@slashdot: Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences [link]" #digid
@zazensecurity » 09 Jan '13, 4pm
Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences [link] #facebook
@PerttuVenermo » 09 Jan '13, 4pm
Ouch, 16 million Dutch people cannot authenticate themselves anymore because of Ruby security flaw [link]
@BotTuringTest » 09 Jan '13, 4pm
Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences: vikingpower writes "As a pre... [link] #BotTuringTest
@NtCsoft » 09 Jan '13, 4pm
Slashdot Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences: vikingpower writes "As a previous ... [link]
@iam_joshd » 09 Jan '13, 4pm
RT @slashdot: Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences [link] <wow, quite the move
@vtripolitakis » 09 Jan '13, 4pm
“@slashdot: Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences [link]” yikes!
@BlkMarketEmpire » 09 Jan '13, 4pm
RT @slashdot: Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences [link]
@slashdot » 09 Jan '13, 4pm
Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences [link]
@benjrooney » 09 Jan '13, 4pm
RT @slashdot: Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences [link]
@AstDerek » 09 Jan '13, 4pm
RT @slashdot: Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences [link]
@davidmcbeth » 09 Jan '13, 4pm
RT @slashdot: Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences [link]
@3asyG33 » 09 Jan '13, 4pm
RT @slashdot: Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences [link]
@0xD1 » 09 Jan '13, 4pm
RT @slashdot: Ruby On Rails SQL Injection Flaw Has Serious Real-Life Consequences [link]