CancelProfileIsBroken
Member of 1 project: Ruby on Rails
CancelProfileIsBroken's latest activity
Sunday, September 13 2009
-
- State changed from new to resolved
Saturday, September 12 2009
3194
secure_compare regression on ruby 1.8.7
was updated
in Ruby on Rails
-
CancelProfileIsBroken commented
Got a publicly-accessible URL for the full trackback?
Friday, September 11 2009
Tuesday, September 08 2009
3168
A better way to avoid timing attacks on the message verifier
was updated
in Ruby on Rails
-
- Assigned user set to Michael Koziarski
-
- State changed from new to invalid
-
- State changed from new to invalid
1) Putting # in the middle of an ERB code chunk to indicate a comment isn't supported by ERB. It used to work by accident under Ruby 1.8.6, but that's an implem...
Sunday, September 06 2009
-
- State changed from new to invalid
Friday, September 04 2009
3144
undefined method `^' for String - RoR 2.3.4
was updated
in Ruby on Rails
-
CancelProfileIsBroken commented
See http://codahale.com/a-lesson-in-timing-attacks/ - an article from the guy who reported the issue in Rails. It's a good introduction to the subject.
-
- Assigned user set to Michael Koziarski
-
CancelProfileIsBroken commented
hukl - Isn't the simple "compare" approach vulnerable to the timing attack that http://github.com/rails/rails/commit/1f07a89c5946910fc28ea5ccd1da6a... was comm...