James Golick personal blog
Reminder: "Broken gets fixed, but shitty lasts forever"
A while back, it came to my attention that ruby's net/https implementation had an insecure default: not verifying TLS certificates (OpenSSL::SSL::VERIFY_NONE). I wrote an article about it for RubyInside, and helped @geemus fix the issue in his excon gem. Despite this being an incredibly serious security issue, nobody…
- Points
- 169
- HN comments
- 34
- Submissions
- 1
- Cited by
- 0 commenters
Software EngineeringCareer & Management2011
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Feb 16, 2011 | Reminder: "Broken gets fixed, but shitty lasts forever" by abhay | 169 | 34 |
