Hacker News Reader

A bit off topic, since this is done in Rails, and we all read the dreadful warnings about the remote code execution exploit, how safe is it now? (I plan to run internally at work)? Are the latest YAML vulnerabilities patched? Just do 'gem update rails' often? Also is the rubygems.org exploit behind us?

View on HN

Not only does it run the latest stable release of Rails 3.2 (which was immune from the latest security vunerability), but I made sure we are running the latest versions of all Rubygems.

Having said that, this is very much an early beta right now. We expect to get a lot of feedback over the next little while, and we want to integrate that before we release a 1.0 stable that we'd be comfortable telling many people to install.

If you install it now, you'll have a more complicated upgrade path to our 1.0.

Reply on news.ycombinator.com