Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That seems like an unnecessary vulnerability waiting to happen.


Can’t wait till they patch it away and we lose the ability to investigate our own https traffic.


At some point someone needs to take responsibility for allowing modification of environment variables via something dumb like http. Debugging interfaces are fine- we should expect more from developers.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: