News for hackers. Stuff that matters.
Re:Yes We Can. Ruby "require" over HTTP, That Is. by lanaer on Tuesday May 12, 2009 @02:52PM (#605957)
This increases the amount of harm a man-in-the-middle attack can do, also (though only if the attacker is after you, specifically, or at least people who blindly require & execute ruby code).
Re:Yes We Can. Ruby "require" over HTTP, That Is. by jrockway on Tuesday May 12, 2009 @04:18PM (#606101)
Yes, DNS poisoning could be bad. It does add a lot of complexity to your application without adding much in the way of features.