Hacking Ruby applications
Details
Socialization and networking (6:00-6:20)
Hosted by: Farshad and Jeevan
_____________________________________________________________________________________
Hacking Ruby Applications (6:20-7:20pm)
By: Lucas Amorim
Ruby is one of the most widely used programming languages these days. Part of its success comes from its flexibility and extensibility - which makes the ability to create your own DSL (domain-specific language) not only a possibility but also a common practice. However, with great power comes great responsibility and in the cybersecurity industry, we all know that every feature comes with a new attack surface. In this talk, we're going to explore Ruby's flexibility and power and dive deep into real-world examples of vulnerabilities found in well-known open-source projects as well as vulnerabilities I've found performing code auditing in proprietary source code.
Speaker Bio:
Lucas Amorim is a senior software engineer specialized in distributed systems and application security with over 12 years of experience writing software and performing code-auditing and penetration testing.
He has been involved in many open-source projects, including JRuby, concurrent-ruby, rkt and let's encrypt, he also has several exploits and security advisory published.
⚫ https://www.linkedin.com/in/lucas-amorim-74248313/
_____________________________________________________________________________________
Live streaming: please RSVP to get the Zoom link. Be sure to turn on your camera and join the party!
Also join the conversation in #owasp-vancouver channel on MARS Slack (https://fourthplanet.ca/slack/).
Thank you:
To our volunteers for helping make this happen, and to sponsors for supporting us.
_____________________________________________________________________________________
OWASP Vancouver Web site can be found at the link below, where you can find more info and stay connected with us. You can also follow us on Twitter @OWASPVancouver, and join our group on LinkedIn.