Drupal 7 SQL Injection Vulnerability
I feel like Hacker News has become home of the "security exploit du jour." There have always been new exploits being found daily, what's changed is the severity and wide reaching nature of said exploits.You might ask, when will we learn?  Well, the truth is making secure systems is incredibly hard work and often comes at the price of flexibility/usability/programmer productivity.  We know how to do it, it's just not easy to incorporate.