This scares me. I'm the eng lead of a startup that's a bit smaller than Patreon. And hey, we program in Python too.

We're not vulnerable to this particular problem. And I feel pretty confident that both our stage and production environments are well-protected. However, I can't help but wonder if I'm missing something. I'm sure Patreon felt confident a month ago.