How github was hacked
Is anyone else laughing at how ridiculous this vulnerability is?I just spent a few hours last week hacking through the Stripe CTF game. Environment variables, string formatting injections, and a timing/side channel attack to top it off.This is just POSTing a value to an endpoint. And it gets written?! To the database?! That's awesome and scary at the same time.