Hi, I am Jan. This is my old Ruby blog. I still post about Ruby, but I now do it on idiosyncratic-ruby.com. You should also install Irbtools to improve your IRB.

Ruby and Random

January 2013, ruby · ruby1-9 · hints · tutorial · security

Wrongly used randomness can be the source of hard-to-detect bugs and security holes. This is relevant every time you use randomness, for example, when implementing an existing protocol/interface that requires random values or generating tokens for your next raffle. This article describes when to use which of Ruby’s randomness methods.

…read

Things I learned while implementing version 1.0 of pws

May 2012, ruby · ruby1-9 · stdlib · gem · thoughts · working-environment · jruby · security

After releasing version 0.9 of my cli password manager, I received friendly feedback and suggestions, which encouraged me to further improve it. Here are some of my experiences implementing pws 1.0:

…read

Rack::NoTags

November 2009, ruby · rails · xml · rack · security · xss · regex

This is my submission for the CodeRack contest:

A middleware that removes < and > from all incoming requests.

…read