I remember reading this when I was the sole Infrastructure Engineer for Reverb.com. I knew we were being attacked and I knew we had issues but I didn't have any idea where to start. This article sparked my interested in Cyber Security and helped me find a bug in the website that allowed me to set the CEO's credit card as a primary card on my account in production. That was an amazing day.
Thanks to the author of the article for inspiring me to dig in the rails codebase and find vulnerable patterns that I could exploit. Thankfully I was able to pivot into a cyber security focused career and I credit this article for starting me down that path.
Rails has a few things going for it that other languages and frameworks don't but it still lets you shoot yourself in the foot if you're not careful. I ended up writing a blog article about preventing XSS in rails as a direct inspiration from the OPs article:
https://product.reverb.com/stay-safe-while-using-html-safe-i...
Just because this article is old doesn't mean it's not useful. Thanks for posting!
This exact scene played out in my mind as I was reading the article. Couldn't believe what I was reading and here I was wondering if the show would age well..
Not many people would believe that you can be a better parent after consuming cannabis. I'm a much better parent after consuming cannabis. I listen more, play harder and can let go of the parental thoughts that silently occupy my brain when I'm sober and playing with my kids. Cannabis really helps me let go of parental world and enter theirs for just a little while..
I agree. I felt that way when my friends started doing dabs and telling me how amazing it was. It kind of scared me to be honest. I've switched from smoking to making my own cannabis tinctures and have been using that for years. I've found that a minimal dose of cannabis in the morning really helps me dial the knob on my radio just right. They're really easy to make and so much more efficient than smoking.
In addition to community rules we also curate a bunch of rules in house from malware we've discovered across our fleet. We then aggregate this info into ELK and alert on it.
At Home: OSQuery as well + tiny elk stack + Elastalert. Overkill for a typical home setup but I like it.
Matt - if you see this I'm terribly sorry for your loss. I just married my best friend in December and I'd be so lost without her. I can't imagine how you're feeling. I don't know what else to say besides that I'm sending you love and support from across the net. Stay strong my friend, your blog has powered many of my adventures into SEO and beyond.
Intel claimed that NetBurst would allow clock speeds of up to 10 GHz in future chips; however, severe problems with heat dissipation (especially with the Prescott Pentium 4) limited CPU clock speeds to a much lower 3.8 GHz
So how do we balance personal liberty with respect for others? I don't know the solution but welcome the discourse. Part of the problem I think is that the people who engage in these behaviors don't care very much for themselves, let alone others. I've often wondered if people who partake in cigarette smoking have a death wish of sorts, just unable to take the fast route.
So what do we do? I don't believe in making them illegal as that infringes on others rights to choose what they put in their body, but I do feel for the kids and family members who have to put up with the habit.
This is the wrong thing to focus on. The situation we're in isn't a result of where this person was educated. The fact that they had a lack of professional experience required to demand a standard of security that would prevent this type of problem is the only thing I think worth discussing here.
I dropped out of school as soon as I realized I could make 50k/year doing IT work vs paying 50k a year to a school whose curriculum was from the stone age. I fully endorse education of all forms but our current model for educating the next generation of workforce is broken but I digress.
The super fucked up part is that it automatically signs you up for their "Credit protection" if you use their site to see if you were impacted. Doesn't ask if you'd like to, just says "Thanks for signing up, your year starts now!"
I think it's most likely a bubble. Enjoy it while it lasts and build a sturdy parachute for when(and likely if) it doesn't. Maybe one day there will be too many of us and our price will be driven downwards.
I would assume and hope that she was. I enjoyed the content and she deserved to be paid for it. But I don't know if she meant livelihood in the financial context or not, so I couldn't tell you definitively.