Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

What sort of security vulnerability would justify this extra paranoia? The worst case is that it's something which affects the very-common case of postgres servers that only talk to local services, like a unicode or quoting error that made sites which nominally quote their queries correctly vulnerable to SQL injection. That would be as serious as the recent Rails vulnerabilities: drop everything, patch everything everywhere, or definitely be rooted.

Be ready to patch as soon as it's out; this could be a big deal.



From what I hear this is pre-auth access to the DB, though it's not from the most reliable of sources.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: