anchor.diff:            ul
               li We can use this to see bits of other people's requests          
               li And with minor fiddling, we can find the relevant bit of request we're looking for
  +            li Live for 6 months, from September last year until the end of February
   
         section
           h2 Fixed        
  
positive.code:         h2 So?
          aside
            ul
              li 1.4 million connectable postgres's, as of this morning
              li Sometimes for convenience, relying on postgres' own security
              li Sometimes for distributed infrastructure
              li All in hilarious danger
  
negative.code:           li <span class='highlight'>MongoDB</span>: Overflow exploits, crashing servers with a single request <br/>(CVE-2012-6619, CVE-2013-2132)
            li <span class='highlight'>RubyGems</span>: YAML exploit gave an external user full access to the repo
            li <span class='highlight'>NPM</span>: Full disk exposure on NPM server with a maliciously crafted URL
          aside
            ul
              li There's a lot of these, not hard finding options to talk about.
              li 4,500 so far in 2015, 711 9+ out of 10.
              li 9+ generally means terrible consequences, easy to attack, widely relevant, not a special case
  
        section(data-bespoke-state='topic-slide') 
          h2.full-slide(style='text-align: left')
  