undefined | Better HN

0 pointsryanlol10y ago0 comments

I've seen a bunch of companies use rails HTTP basic auth internally.

And it's not that it wasn't caught until now, it's that it wasn't caught before the commit was accepted.

0 comments

I expect (though I have not looked) that it's old code that wasn't eyeballed for security so much as for consistency and correctness. Once in, it doesn't leave.

j / k navigate · click thread line to collapse

0 comments

eropple10y ago

I expect (though I have not looked) that it's old code that wasn't eyeballed for security so much as for consistency and correctness. Once in, it doesn't leave.

j / k navigate · click thread line to collapse