veloper
Re:Rubygems.org compromised
on Wednesday January 30, 2013 @09:43AM (#5139649)
I think you're right, the title is inaccurate.
Running `$ bundle update` will not inject this into your app.
You'd have to intentionally add `gem "exploit", "~> 22.31.31"` to your Gemfile.
Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3
on Monday January 28, 2013 @05:37PM (#5131179)
If everyone is really going to take the route of "My X Framework is fine b/c nothing's been reported" then I'd like to contribute these links showing vulnerability break downs...
* Rails: http://www.cvedetails.com/product/22568/Rubyonrails-Ruby-On-...
* Django: http://www.cvedetails.com/product/18211/Djangoproject-Django...
* CodeIgniter: http://www.cvedetails.com/product/11625/Codeigniter-Codeigni...
* Top 50 Products (Better stop using these too! /s): http://www.cvedetails.com/top-50-products.php
Re:First High-Resolution Color Mosaic of Curiosity's Mastcam Images
on Saturday August 11, 2012 @11:10PM (#4371700)
This is the first picture of Mars that made me say "wow" -- literally out loud. The image is truly awesome, not only from visual aspect, but also because of the amazing technological achievement(s) it took to obtain it.
The clarity of the terrain, and the mountains/hills in the background, makes Mars feel much more tangible to me; It almost feels like I was there to take the shot myself.
How to Implement a Single User Model with Rails, ActiveAdmin, and Devise
Re:Exploiting 'INSERT INTO' SQL Injections Ninja Style
on Friday October 28, 2011 @10:14PM (#3170854)
This is not exploiting INSERT INTO; it's exploiting horrible developers.
Rule #1: Never trust the user.
Re:Google Launches The Ultimate Jobs Killer
on Monday September 26, 2011 @09:01AM (#3038635)
How do they prevent theft? With the (Yo)u-Scan machines in my local super markets the approx. weight is used to verify your purchase.
Re:Cross-Site Scripting? In PHP Notices? It's more likely than you think
on Thursday August 18, 2011 @08:14AM (#2898897)
This really falls under a few important coding mantras...
Never trust the user.
Never assume.
Don't do stupid shit.Mission ImposSERPble: Establishing Click-through Rates
Re:Circles Fatigue: The Dark Side Of Google+
on Thursday July 21, 2011 @09:04AM (#2789304)
If a user wants G+ to be like Facebook's friend system they can just make one circle called "Everyone."
Re:Bad Habits that Crush Your Creativity and Stifle Your Success
on Wednesday October 13, 2010 @11:20AM (#1787399)
I'm so guilty of #1 haha.