81: Is This Really a CVE?

The Bike Shed

• Episode: 81: Is This Really a CVE?
• Website: The Bike Shed
• Feed URL: https://www.bikeshed.fm/rss
• Duration: 00:27:21
• Published: 2016-09-28 06:00

Derek and Sean talk through how to handle a security vulnerability that was reported for Clearance, a user authentication library.

• Cardboard Jankowski
• Prevent password reset token leak via HTTP referer
• The Meta Referrer Tag
• CVE
• Bundler Audit
• Ruby Advisory Database
• Ruby security announcement mailing list
• Destroy All Software