Anatomy of an Exploit: An In-depth Look at the Rails YAML Vulnerability

RubySource | Anatomy of an Exploit: An In-depth Look at the Rails YAML VulnerabilityRubySource

rubysource.com 04 Feb '13, 2pm

Anatomy of an Exploit: An In-depth Look at the Rails YAML Vulnerability

Exploits happens, and this month the Rails and Ruby communities have seen no shortage. From a major exploit in Rails to a slightly different Rubygems.org attack, there has never been a better time to brush up on software security. Maybe you’re wondering why these vulnerabilities happen in the first place, why they weren’t caught in the first place, or maybe you just want to know the specifics of this attack. We’ll start off by taking a look at the anatomy of a security exploit, and then dive into the gory details of the YAML issue. Why Insecure Code Happens No one intends to write insecure software. These vulnerabilities are bugs in the software that can be taken advantage of by others. Unlike a normal bug that will cause your software to not function as intended, a bug that opens up a security hole might still work fine for your task and never actually throw any errors. O...

Full article: http://rubysource.com/anatomy-of-an-exploit-an-in-depth-l...

Tweets

@gncvalente » 11 Feb '13, 6pm
Anatomy of an Exploit: An In-depth Look at the Rails YAML Vulnerability [link] #security #ruby
@Glesec » 04 Feb '13, 5pm
Anatomy of an #Exploit: An In-depth Look at the #Rails YAML #Vulnerability | RubySource [link] #Ruby #RoR via @hdmoore
@bradleyland » 04 Feb '13, 3pm
An excellent, and very accessible, write up on methodology behind the recent string of YAML vulns in Ruby apps [link]
@flink91 » 04 Feb '13, 2pm
« Anatomy of an Exploit: An In-depth Look at the Rails YAML Vulnerability » [link] — ruby source
@ruby_news » 04 Feb '13, 2pm
Anatomy of an Exploit: An In-depth Look at the Rails YAML Vulnerability [link]

RubySource | Anatomy of an Exploit: An In-depth Look at the Rails YAML VulnerabilityRubySource

Anatomy of an Exploit: An In-depth Look at the Rails YAML Vulnerability

Tweets

"look down at my sneakers now." A.K.A

look down at my sneakers now

"look down at my sneakers now" OK JUSTIN OK

Windows down , speakers loud , look down at my ...

New vulnerabilities just being disclosed on Rub...

Look What You Can Do With a 420 Sq Ft Apartment!

#Vulnerabilities Ruby on Rails JSON Processor Y...

"Meet me on the 6th floor" "Windows down, speak...

For those concerned about @padrinorb in the lig...

Get the Look: Long Bangs

Ma (rapide) présentation d'hier sur la vuln' YA...

Change your brows, change your look. these litt...

I knew nothing about this. Great! In-depth look...

Know your yu sheng - we break it down into five...

[remote] - Ruby on Rails JSON Processor YAML De...