This doesn't seem to work. It returns the OK for apps I know I have not patched ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		aneth4 on Feb 2, 2013 \| parent \| context \| favorite \| on: Use Rails? Check yourself for the YAML exploit This doesn't seem to work. It returns the OK for apps I know I have not patched (simple stuff I've thrown up on heroku). It's possible heroku is filtering the headers...

borski on Feb 2, 2013 [–]

We know it's not supposed to be 100% reliable, but we haven't seen any false positives so far, actually; only false negatives.

Are you using Syck instead of Psych? If so, that would cause it to return the OK instead, since our check only works for Psych.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact