Justin Collins

Me: I don't think I'll grow vegetables this year. Too much work.

Also me:

I know it's egotistical, but I like to ask LLMs "Who created the Rails security tool Brakeman?"

Sadly for my ego, most get it wrong, and they will double down if I contest it.

ISP is offering renewal at same price, but going from 1Gb to 3Gb. Should I go for it? 🤔

https://social.heise.de/@heiseonlineenglish/116453360304404198

Looks like a deserialization gadget in ERB.

If you are using Marshal directly with user input... please stop. If you are still using Marshal for Rails cookies... it's been ages, move to (signed, encrypted) JSON.

Edit: I'm not quite awake yet. Use server-side storage for session cookie data!

#ruby #security

I used to be such a rebel. I acquired this nowhere near Japan.