anchor.diff:            li <span class='highlight'>MongoDB</span>: Overflow exploits, crashing servers with a single request <br/>(CVE-2012-6619, CVE-2013-2132)
             li <span class='highlight'>RubyGems</span>: YAML exploit gave an external user full access to the repo
             li <span class='highlight'>NPM</span>: Full disk exposure on NPM server with a maliciously crafted URL
  +        aside
  +          ul
  +            li There's a lot of these, not hard finding options to talk about.
  +            li 4,500 so far in 2015, 711 9+ out of 10.
  +            li 9+ generally means terrible consequences, easy to attack, widely relevant, not a special case
   
         section(data-bespoke-state='topic-slide') 
           h2.full-slide(style='text-align: left')
  
positive.code:           ul
              li We can use this to see bits of other people's requests          
              li And with minor fiddling, we can find the relevant bit of request we're looking for
  
        section
          h2 Fixed        
  
negative.code:         h2 So?
          aside
            ul
              li 450000 connectable postgres's on the default port
              li Sometimes for convenience, relying on postgres' own security
              li Sometimes for distributed infrastructure
              li All in hilarious danger
  