ruby

Ruby Programming Language

ruby-lang.org 22 Feb '12, 9am

Security Fix for Ruby OpenSSL module: Allow "0/n splitting" as a prevention for the TLS BEAST attack. In OpenSSL, SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS option for SSL connection is used to prevent TLS-CBC-IV vulnerability described at [1] . It's known issue of TLSv1/SSLv3 but it attracts lots of attention these days as BEAST attack [2] (CVE-2011-3389). Ruby related topics are at our issue tracker [3] . Until now Ruby OpenSSL extension uses SSL_OP_ALL option, the combined option of OpenSSL for various bug workarounds that should be rather harmless, for all SSL connection by default. And it only allows users to add other options so you could not remove the feature that is included in SSL_OP_ALL option, like SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS . It was intentional as it didn't expose constants like SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS , but we should allow to unset the option so th...

Full article: http://www.ruby-lang.org/en/

Tweets

@KeithMarcum » 22 Mar '12, 7pm
Has anyone else been blocked from [link] I'm guessing someone in our colo did something to get us filtered.
@BananaInLine » 22 Mar '12, 12pm
@Mayskiykot советую почитать [link] и книгу Agile Web Development with Rails
@tvlooy » 22 Mar '12, 11am
seems that [link] is setting Content-Encoding: x-gzip on the downloads instead of just Content-Type: application/x-gzip
@joneslee85 » 22 Mar '12, 5am
What's the fate of the new [link] site in Jekyll?
@DearHarry » 20 Mar '12, 4pm
@Zn4rK Inga problem!: [link] :)
@ziggurism » 17 Mar '12, 1pm
@codinghorror Totally! At the time [link] linked to multiple 404ed resources by _why, looking quite unprofessional
@stevie_chambers » 16 Mar '12, 6pm
@mpoore [link] and [link]
@basyura » 12 Mar '12, 11pm
[link] の issue みたいにアバターを付けられるようにしたいなぁ
@relequestual » 07 Mar '12, 10am
@jackhayter [link] [link] [link] [link] [link]
@Ketan_Mhatre » 29 Feb '12, 6pm
Ruby Programming Language [link]
@sugamasao » 26 Feb '12, 7am
2002年までは[link]でニュースを辿れた [link]
@HomebrewUpdates » 24 Feb '12, 2pm
[Rev:e804abb6] formula updated: ruby 1.9.3-p125 [link] #machomebrew #ruby
@jaimeiniesta » 23 Feb '12, 8am
W3Clove FIGHT! [link] VS. [link] [link] via @w3clove
@tenderlove » 22 Feb '12, 11pm
Does anyone in particular manage ruby-talk? I can't seem to get my [link] address to subscribe. /cc JEG2
@rgarner » 22 Feb '12, 9am
@jystewart Well, I saw p125, nearly went for it, but [link] recommended p0 as latest stable. Not so?
@FlabienCbien » 23 Mar '12, 2am
Ruby Programming Language: [link] #ruby
@Mojang_Bot » 03 Mar '12, 9am
Ruby Programming Language: [link] #1.9