Earlier quoted context omitted.
Says the 8 hour old troll account.
Please don't feed trolls with attention. Instead, flag them by clicking on a comment's timestamp to go to its page, then clicking "flag" at the top.
I did.
A week with a Rails Security Strategy: More security, new habits
21–27 of 27 posts
Re: A week with a Rails Security Strategy: More security, new habits
#22Earlier quoted context omitted.
To the people downvoting me: - http://www.cvedetails.com/product/22568/Rubyonrails-Ruby-On-... - http://www.cvedetails.com/vulnerability-list/vendor_id-12043...
You're getting downvoted because security issues are far from unique to Ruby on Rails. Are you aware of any web frameworks with a pristine security history?
Node.js is not bad.
Re: A week with a Rails Security Strategy: More security, new habits
#23Earlier quoted context omitted.
You're getting downvoted because security issues are far from unique to Ruby on Rails. Are you aware of any web frameworks with a pristine security history?
Node.js is not bad.
Node.js is not a web framework.
Re: A week with a Rails Security Strategy: More security, new habits
#24Re: A week with a Rails Security Strategy: More security, new habits
#25Earlier quoted context omitted.
Node.js is not bad.
Node.js is not a web framework. http://expressjs.com/advanced/security-updates.html
Express.js has 5 vulnerabilities in 6 years.
Yeah I think I'm going to take my chances with Express.js rather than Ruby on Rails with it 57 vulnerabilities in 6 years.
Re: A week with a Rails Security Strategy: More security, new habits
#26Earlier quoted context omitted.
Node.js is not a web framework. http://expressjs.com/advanced/security-updates.html
Express.js has 5 vulnerabilities in 6 years. Yeah I think I'm going to take my chances with Express.js rather than Ruby on Rails with it 57 vulnerabilities in 6 years.
Express is a micro framework, Rails is not. Rails covers more ground. You would want to compare security of Express to Sinatra or Grape.
Re: A week with a Rails Security Strategy: More security, new habits
#27Earlier quoted context omitted.
Node.js is not a web framework. http://expressjs.com/advanced/security-updates.html
Express.js has 5 vulnerabilities in 6 years. Yeah I think I'm going to take my chances with Express.js rather than Ruby on Rails with it 57 vulnerabilities in 6 years.
The problem with thinking this way is that you don't know what security issues that nobody knows about yet are lurking in there. I remember the time before the recent spate of Rails vulnerabilities in the last 5 years or so, and I thought similarly about its security as you seem to about the Nodejs ecosystem. It's definitely possible that your confidence won't ever be punctured by a similar run of security issues, but my personal view is that it tends to be hubris to think your favorite technology is just better at security, for vague reasons.