rails/rails — comment on commit b83965785db1eec019edf1fc272b1aa393e6dc57
File:  line 0
By DouweM:

@joshbuddy Yes, he definitely got a lot of attention for the problem this way, and that's absolutely a good thing: more people should know about vulnerabilities caused by Rails mass-assignment attribute protection defaults, and people should definitely know a site the size of GitHub had such big and obvious vulnerabilities.

I just think it was a bit of an assholeish/childish move to do it like this. In the end I prefer it happening this way to it not being seen by the public and it being covered up by GitHub or whatever, so I guess ultimately I am glad this is how everything turned out, but I don't like that @homakov did it like this. I'm aware I'm not doing a very good job at making myself clear.