How github was hacked
Is anyone else laughing at how ridiculous this vulnerability is?<p>I just spent a few hours last week hacking through the Stripe CTF game. Environment variables, string formatting injections, and a timing/side channel attack to top it off.<p>This is just POSTing a value to an endpoint. And it gets written?! To the database?! That's awesome and scary at the same time.