Mass assignment in Rails applications (why GitHub was vulnerable) | Hacker News Reader