News for hackers. Stuff that matters.

veloper

Re:Rubygems.org compromised on Wednesday January 30, 2013 @09:43AM (#5139649)
I think you're right, the title is inaccurate.

Running `$ bundle update` will not inject this into your app.

You'd have to intentionally add `gem "exploit", "~> 22.31.31"` to your Gemfile.

Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 on Monday January 28, 2013 @05:37PM (#5131179)
If everyone is really going to take the route of "My X Framework is fine b/c nothing's been reported" then I'd like to contribute these links showing vulnerability break downs...

* Rails: http://www.cvedetails.com/product/22568/Rubyonrails-Ruby-On-...

* Django: http://www.cvedetails.com/product/18211/Djangoproject-Django...

* CodeIgniter: http://www.cvedetails.com/product/11625/Codeigniter-Codeigni...

* Top 50 Products (Better stop using these too! /s): http://www.cvedetails.com/top-50-products.php

This is the first picture of Mars that made me say "wow" -- literally out loud. The image is truly awesome, not only from visual aspect, but also because of the amazing technological achievement(s) it took to obtain it.

The clarity of the terrain, and the mountains/hills in the background, makes Mars feel much more tangible to me; It almost feels like I was there to take the shot myself.

Re:Exploiting 'INSERT INTO' SQL Injections Ninja Style on Friday October 28, 2011 @10:14PM (#3170854)
This is not exploiting INSERT INTO; it's exploiting horrible developers.

Rule #1: Never trust the user.

Re:Google Launches The Ultimate Jobs Killer on Monday September 26, 2011 @09:01AM (#3038635)
How do they prevent theft? With the (Yo)u-Scan machines in my local super markets the approx. weight is used to verify your purchase.
This really falls under a few important coding mantras...

    Never trust the user.
    Never assume.
    Don't do stupid shit.
Re:Circles Fatigue: The Dark Side Of Google+ on Thursday July 21, 2011 @09:04AM (#2789304)
If a user wants G+ to be like Facebook's friend system they can just make one circle called "Everyone."
Re:Bad Habits that Crush Your Creativity and Stifle Your Success on Wednesday October 13, 2010 @11:20AM (#1787399)
I'm so guilty of #1 haha.