postmodern

#!/usr/bin/env ruby
#
# Proof-of-Concept exploit for Rails Remote Code Execution (CVE-2013-0156)
#
# ## Advisory
#
#   https://groups.google.com/forum/#!topic/rubyonrails-security/61bkgvnSGTQ/discussion
#
# ## Caveats
#

jehiah

# Copyright Jehiah Czebotar 2013
# http://jehiah.cz/

import tornado.options
import glob
import os
import sqlite3
import logging
import datetime
import csv

coldnebo

require 'singleton'

# outputs a colored call-trace graph to the Rails logger of the lines of ruby code
# invoked during a single request.
#
# Example:
#
# 1) Make sure this file is loaded in an initializer
#
# 2) Add the following to your application.rb in Rails3:

ndarville

Business Models

Advertising

Models	Examples
Display ads	Yahoo!
Search ads	Google

rubiii

$ rspec --format MacVimFormatter --color spec

jimweirich

Today I ran a quick twitter poll asking: "What is the state of the art
in Ruby SOAP clients".

Savon (http://savonrb.com/) was by far the big winner with 29
recommendations.

Surprisingly Soap4r actually got 6 votes, but most were accompanied by
comments like "the last time I used SOAP". It was also the only entry
that got negative votes (3) with comments like "soap4r is broken and
crap by the way".

masonforest

Installing a Gem on Heroku from a Private GitHub Repo

Sometimes you want to use a gem on Heroku that is in a private repository on GitHub.

Using git over http you can authenticate to GitHub using basic authentication. However, we don't want to embed usernames and passwords in Gemfiles. Instead, we can use authentication tokens.

1. Get an OAuth Token from GitHub

---

First you will need to get an OAuth Token from GitHub using your own username and "note"

nikcub

In August 2007 a hacker found a way to expose the PHP source code on facebook.com. He retrieved two files and then emailed them to me, and I wrote about the issue:

http://techcrunch.com/2007/08/11/facebook-source-code-leaked/

It became a big deal:

http://www.techmeme.com/070812/p1#a070812p1

The two files are index.php (the homepage) and search.php (the search page)

ahoward

av = ActionView::Base.new(Rails.application.config.paths['app/views'].first)

### av.controller = Current.mock_controller # gem install rails_current

av.render( :locals => {:model => Model.first}, :partial => "shared/model" )  #=> string

andkerosine

$stack, $draws = [], {}

def method_missing *args
  return if args[0][/^to_/]
  $stack << args.map { |a| a or $stack.pop }
  $draws[$stack.pop(2)[0][0]] = args[1] if args[0] == :<
end

class Array
  def +@