[#39227] [Ruby 1.9 - Bug #5264][Open] Commit 33157 — Charlie Savage <cfis@...>
[#39241] [Ruby 1.9 - Bug #3422][Closed] Object.const_get(:A, false) can access BasicObject::A — Nobuyoshi Nakada <nobu@...>
On Sat, Sep 3, 2011 at 04:57, Nobuyoshi Nakada <[email protected]> wrote:
> Why is this issue closed? Is the current behaviour acceptable?
[#39260] RubySpec vs CRuby's test/... — Marc-Andre Lafortune <ruby-core-mailing-list@...>
Before the release of Ruby 1.9.2 it was decided that Ruby releases
Hi,
(09/05/2011 03:54 AM), Marc-Andre Lafortune wrote:
Hi,
2011/9/5 Marc-Andre Lafortune <[email protected]>:
On Mon, Sep 5, 2011 at 3:08 AM, NARUSE, Yui <[email protected]> wrote:
2011/9/5 Marc-Andre Lafortune <[email protected]>:
I'll jump in with some context from the JRuby perspective.
2011/9/7 Charles Oliver Nutter <[email protected]>:
On Wed, Sep 7, 2011 at 4:17 AM, NARUSE, Yui <[email protected]> wrote:
Hi,
Yukihiro Matsumoto:
(2011/09/09 1:29), Michael Klishin wrote:
On Thu, Sep 8, 2011 at 4:19 PM, NARUSE, Yui <[email protected]> wrote:
Hello Luis,
On Thu, Sep 8, 2011 at 5:34 PM, Masaya TARUI <[email protected]> wrote:
On Thu, Sep 8, 2011 at 3:57 PM, Luis Lavena <[email protected]> wrote:
On Thu, Sep 8, 2011 at 5:07 PM, Charles Oliver Nutter
(2011/09/08 15:28), Charles Oliver Nutter wrote:
2011/9/9 Charles Oliver Nutter <[email protected]>:
On Thu, Sep 8, 2011 at 9:47 PM, NARUSE, Yui <[email protected]> wrote:
I realize that I'm a small fish in this ocean, but for every release
(09/09/2011 03:51 PM), Kirk Haines wrote:
[#39267] [Ruby 1.9 - Bug #5273][Open] Float#round returns the wrong floats for higher precision — Marc-Andre Lafortune <ruby-core@...>
[#39279] [Ruby 1.9 - Bug #5276][Assigned] 4294967295.8.round is 4294967295 on 32bit — Yui NARUSE <naruse@...>
[#39304] [Ruby 1.9 - Bug #5285][Open] Ruby 1.9.2 throws exception on sort of array containing true AND false values — Martin Corino <mcorino@...>
[#39309] [Ruby 1.9 - Bug #5287][Open] 1.9.3 - Interpolation in a string causes the string's encoding to be set to ASCII-8BIT — Jon Leighton <j@...>
[#39326] [Ruby 1.9 - Feature #5291][Open] Enabling GC Profiler GC_PROFILE_MORE_DETAIL and CALC_EXACT_MALLOC_SIZE — Charlie Savage <cfis@...>
[#39360] What is the role of rb_objspace_t in gc.c? — Kurt Stephens <ks@...>
What is the role of rb_objectspace_t and the pointers to it inside gc.c?
[#39380] [Ruby 1.9 - Bug #5299][Open] Segmentation fault when using TweetStream gem in ruby 1.9.3 — Dushyanth Maguluru <dushyanth.maguluru@...>
[#39435] [Ruby 1.9 - Bug #5306][Open] Application Hangs Due to Recent rb_thread_select Changes — Charlie Savage <cfis@...>
[#39450] Comments on HowToReportEnglish — Andrew Grimm <andrew.j.grimm@...>
I've done some proofreading for HowToReportEnglish, and I'd like to
Hello,
Hello
[#39451] File.realpath behavior questions — Luis Lavena <luislavena@...>
Hello,
Hi,
On Sun, Sep 11, 2011 at 4:48 AM, Nobuyoshi Nakada <[email protected]> wrot=
[#39480] Modifications to libraries like Rake should be done upstream first — Luis Lavena <luislavena@...>
Hello,
[#39484] [Ruby 1.9 - Bug #5309][Open] 0.6.to_r != "0.6".to_r — Brian Ford <brixen@...>
[#39487] File::BINARY does not behave as advertised — Cameron Pope <camerooni@...>
Hello -
On Mon, Sep 12, 2011 at 16:00, Cameron Pope <[email protected]> wrote:
[#39498] [Ruby 1.9 - Feature #5310][Open] Integral objects — Kenta Murata <muraken@...>
On Mon, Sep 12, 2011 at 6:15 PM, Kenta Murata <[email protected]> wrote:
[#39539] [Ruby 1.9 - Feature #5321][Open] Introducing Numeric#exact? and Numeric#inexact? — Kenta Murata <muraken@...>
[#39597] File.expand_path ~username always trigger ArgumentError on Windows — Luis Lavena <luislavena@...>
Hello,
[#39618] [Ruby 1.9 - Bug #5335][Open] [RFC/PATCH] test_old_thread_select: timing tweaks — Eric Wong <normalperson@...>
[#39627] Re: [ruby-cvs:40472] drbrain:r33294 (trunk): * test/openssl/test_ssl.rb (class OpenSSL): Test — "NARUSE, Yui" <naruse@...>
(2011/09/19 9:28), [email protected] wrote:
On Sep 19, 2011, at 11:33 AM, NARUSE, Yui wrote:
2011/9/19 Eric Hodel <[email protected]>:
[#39629] [Ruby 1.9 - Feature #5341][Open] Add SSL session reuse to Net::HTTP — Eric Hodel <[email protected]>
On 10/26/2011 11:39 AM, Eric Hodel wrote:
[#39632] [Ruby 1.9 - Bug #5342][Open] ConditionVariable can wake a Thread that is no longer waiting on it — Mike Perham <mperham@...>
[#39634] [Ruby 1.9 - Bug #5343][Open] Unexpected blocking behavior when interrupt Socket#accept — Tomoyuki Chikanaga <nagachika00@...>
[#39672] [Ruby 1.9 - Feature #5352][Open] How about using <> to represent Here Document? — Joey Zhou <yimutang@...>
[#39673] [Ruby 1.9 - Bug #5353][Open] TLS v1.0 and less - Attack on CBC mode — Martin Bosslet <Martin.Bosslet@...>
[#39684] [Ruby 1.9 - Bug #5357][Open] Indentation of nested operators should nest — Nikolai Weibull <now@...>
[#39690] [Ruby 1.9 - Feature #5360][Open] BasicObject#binding — Thomas Sawyer <transfire@...>
[#39696] Time spent on expanding load path — Juan Wajnerman <jwajnerman@...>
I've been following the performance of Ruby 1.9.x since the beginning. I =
[#39700] [Ruby 1.9 - Feature #5364][Open] How about new syntax: "object.\method" returns a Method instance? — Joey Zhou <yimutang@...>
[#39704] [Ruby 1.9 - Bug #5365][Open] WEBrick lacks the application/javascript and image/svg+xml MIME types. — Hal Brodigan <postmodern.mod3@...>
[#39740] [Ruby 1.9 - Feature #5372][Open] Promote blank? to a core protocol — Alex Young <alex@...>
On Tue, Sep 27, 2011 at 06:18:19PM +0900, Alex Young wrote:
On 27/09/2011 19:46, Aaron Patterson wrote:
On Sep 27, 2011, at 6:52 PM, Alex Young wrote:
Eric Hodel wrote in post #1024462:
Hi,
On 04/10/11 16:52, Nobuyoshi Nakada wrote:
[#39772] ObjectSpace.reference_form(obj) #=> references_array — SASADA Koichi <ko1@...>
Hi,
Hi,
Hi,
(2011/09/30 5:37), hemant wrote:
On 09/30/2011 07:08 AM, SASADA Koichi wrote:
Revisit.
On Sep 20, 2012, at 6:14 PM, SASADA Koichi <[email protected]> wrote:
(2012/09/25 7:38), Eric Hodel wrote:
I'm sorry for late reply.
(2012/09/25 15:18), Narihiro Nakamura wrote:
[#39787] Running the YARV parser/compiler without GC? — Magnus Holm <judofyr@...>
Hey smart folks,
[ruby-core:39727] Re: [Ruby 1.9 - Bug #5353] TLS v1.0 and less - Attack on CBC mode
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 09/24/2011 08:44 PM, Martin Bosslet wrote: > http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html > http://www.imperialviolet.org/2011/09/23/chromeandbeast.html > > From what I understand this is really sweet, instead of trying to guess a > whole block at a time they play with block boundaries so that they effectively > only have to guess one byte at a time instead of let's say 16. Agreed. Wise and pragmatic :) > And it looks like turning off SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS really does > prevent this kind of attack, too. But then again, as nahi already hinted at, > mounting this kind of attack requires quite some sophistication, usually there > are often easier ways for an attacker. Some fix needed especially for clients but for now it should be fixed at client side, and we should wait how OpenSSL treats this issue. I would say that it's not a blocker for 1.9.3. > An interesting approach that wouldn't break compatibility seems to be what > is currently investigated for Chrome: > > http://codereview.chromium.org/7621002 > > Instead of sending a totally empty first record they send one with exactly one > byte to get the same effect of randomizing the IV. Yeah, if I understand the attack correctly, with this vulnerability, an attacker can try to guess a plain text only as the first block of CBC chain. And the above NSS patch reduces the range to 1 byte, and OpenSSL's empty fragment patch reduces it to 0 byte. It's wise and pragmatic, too. :) I wish the 1-byte patch is proven to be safe from compatibility point of view... // NaHi -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEcBAEBAgAGBQJOgC8DAAoJEC7N6P3yLbI2Du8H/A88MBS3BCdDFjDzWtWgfntY 5keNOMZZ+Z5syTKURtCLRqRHrMfvqizdfB83oSVsDXnkwTSacGW2OYKX59z6HezO Hf7rap9oznlFmXjUw0YsJOVuNOL3NYbKzeK/O8Ycn//YeIw7ZQNPsB0vg4vgzwaZ RVaEpss13WWRl3M0IfQ+wl9vHbCnL1kgJmc+Q+vYQ/cUW0k4RBEWrXZ9IQUk97+8 42GS/ZRWl8nRK0VEVAYBY/zdD9oukdbwhW+cxol5Sx4blRgVyB6uoqpevd8rXliU h8jo7NEDx6o/HxgT4Jy/20CD5aHrT7N42ZumE8P0jgM0m5IiR+6++IYfcMvznWg= =84SS -----END PGP SIGNATURE-----