undefined | Better HN

0 pointsIndy90005y ago0 comments

No but, Ruby makes it trivial. No decompilations, no assembly, no debuggers necessary. Drop into an irb in a running process, change stuff and get out in seconds

0 comments

viraptor5y ago

Compilation is not a security control. Also if you're handling transactions at a significant rate, PCI (with all its problems) makes sure there's a trace.

vinceguidry5y ago

> drop into an irb in a running process

This is a thing?

zeckalpha5y ago

It also is a thing in most other languages, including C, Python, Java, Erlang, ...

vinceguidry5y ago

I'm not so sure. You can certainly attach a debugger to any running process. But that's not what parent was suggesting. He was saying anyone could attach a REPL. That's a totally different animal.

It's your own dumb fault if you expose the web-console or similar on production.

j / k navigate · click thread line to collapse

0 comments

viraptor5y ago

Compilation is not a security control. Also if you're handling transactions at a significant rate, PCI (with all its problems) makes sure there's a trace.

vinceguidry5y ago

> drop into an irb in a running process

This is a thing?

zeckalpha5y ago

It also is a thing in most other languages, including C, Python, Java, Erlang, ...

vinceguidry5y ago

I'm not so sure. You can certainly attach a debugger to any running process. But that's not what parent was suggesting. He was saying anyone could attach a REPL. That's a totally different animal.

It's your own dumb fault if you expose the web-console or similar on production.

j / k navigate · click thread line to collapse