Ruby on Rails Security Project

Exploring the Security of Rails and friends.

Ruby on Rails Security Project header image 4

Entries from June 2008

Ruby security vulnerabilities

June 24th, 2008 · No Comments

Here is the news from the Rails Log:
Drew Yao at Apple uncovered a handful of nasty security vulnerabilities affecting all current versions of Ruby. The details are still under wraps because an attacker can DoS you or possibly execute arbitrary code—holy crap! Better upgrade sooner than later.
According to the official Ruby […]

[Read more →]

Tags: Ruby

Automatic security

June 17th, 2008 · 6 Comments

Security is not easy-to-use, not fancy and it is hard to remember all those nasty attack methods. So there are automatic security checks, firewalls, helpers and a lot more. They are built to make your application more secure. But automatic security tools can't help you to find logic faults. What if you have a Cross-Site […]

[Read more →]

Tags: Rails · Server · Web server