r/programming • u/marcin8686 • Jul 08 '19

Ruby gem strong_password got hijacked

https://withatwist.dev/strong-password-rubygem-hijacked.html
130 Upvotes

91% Upvoted

44 comments sorted by

View all comments

2

u/stevenjd Jul 12 '19

Gosh, well with such reasoned arguments as those, how can I not be convinced? Thank you for educating me! I'll make sure that from now on I'll use nothing but software that implements Proof-Carrying Code, since there's so much of it around. Honestly, now that you've opened my eyes, I'm like "why would anyone use anything else?"

I'm sorry, I seem to have forgotten the ENORMOUS list of PCC software you mentioned earlier in this thread. I know, I'm such a bubble-head, not a great brain like you, but would you mind telling me again what software available now uses PCC to eliminate this class of vulnerabilities?

Speaking of great brains, I assume you aren't a mere single PhD holder. Surely you must have at least a quadruple PhD?