This doesn't seem to work. It returns the OK for apps I know I have not patched ... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

aneth4 on Feb 2, 2013 | parent | context | favorite | on: Use Rails? Check yourself for the YAML exploit

This doesn't seem to work. It returns the OK for apps I know I have not patched (simple stuff I've thrown up on heroku).

It's possible heroku is filtering the headers...

borski on Feb 2, 2013 [–]

We know it's not supposed to be 100% reliable, but we haven't seen any false positives so far, actually; only false negatives.

Are you using Syck instead of Psych? If so, that would cause it to return the OK instead, since our check only works for Psych.

Consider applying for YC's Spring batch! Applications are open till Feb 11.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact