anchor.diff:          h2 So?
           aside
             ul
  -            li 1.4 million connectable postgres's, as of this morning
  +            li 450000 connectable postgres's on the default port
               li Sometimes for convenience, relying on postgres' own security
               li Sometimes for distributed infrastructure
               li All in hilarious danger
  
positive.code:           li <span class='highlight'>MongoDB</span>: Overflow exploits, crashing servers with a single request <br/>(CVE-2012-6619, CVE-2013-2132)
            li <span class='highlight'>RubyGems</span>: YAML exploit gave an external user full access to the repo
            li <span class='highlight'>NPM</span>: Full disk exposure on NPM server with a maliciously crafted URL
  
        section(data-bespoke-state='topic-slide') 
          h2.full-slide(style='text-align: left')
  
negative.code:           ul
              li We can use this to see bits of other people's requests          
              li And with minor fiddling, we can find the relevant bit of request we're looking for
              li Live for 6 months, from September last year until the end of February
  
        section
          h2 Fixed        
  