Security hole found in Rails 2.3's http_authentication.rb83 points by nateRead the articleDiscussion on Hacker News