withatwist.dev personal blog

Strong_password Rubygem hijacked

withatwist.dev 4 min read

I recently updated minor and patch versions of the gems our Rails app uses. We want to keep dependencies fresh, bugs fixed, security vulnerabilities addressed while maintaining a high chance ...

Points

625

HN comments

128

Submissions

1

Cited by

0 commenters

Security & PrivacySoftware Engineering2019

Related posts from the same era

No Cookie for You

The GitHub Blog20202,941 points609 commentscited by 30 details

Why I’m done with Chrome

Matthew Green20182,357 points838 commentscited by 4 details

Reading privileged memory with a side-channel

GGoogle Project Zero20182,334 points594 commentscited by 26 details

When you browse Instagram and find Tony Abbott's passport number

mango.pdf.zone20202,326 points446 commentscited by 9 details

Oppose the Earn IT Act

Mozilla Foundation20202,229 points543 comments details

Ken Thompson's Unix Password

Leah Neukirchen20192,101 points637 comments details