"SHA1 key handling"? Anyways, you misread him. All he's saying is that the delay... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		tptacek on March 31, 2012 \| parent \| context \| favorite \| on: #1 CSRF Is A Vulnerability In All Browsers "SHA1 key handling"? Anyways, you misread him. All he's saying is that the delay Egor Homakov experienced was with the Rails dev team, not Github. Github's response to Homakov's finding was very fast.

ricardobeat on March 31, 2012 [–]

I just pulled something out of my ass to fill in the gap. Was probably thinking of RSA.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact