OJ is not as safe as you think for your JSON ruby

OJ is not as safe as you think for your JSON

OJ speeds up JSON in Ruby, but Oj.mimic_JSON silently drops the script_safe option, opening the door to XSS, and adds time precision quirks. What its monkey patching really changes, the stability risks, and best practices for using OJ without surprises.

Feb 3, 2025

The Truth About Password Security: Beyond Special Characters ruby

The Truth About Password Security: Beyond Special Characters

Password security depends on entropy, not special characters. The math behind entropy = N * log2(R), why length beats complexity rules, why database breaches (not login guessing) are the real threat, and implementation tips for saner password policies.

Nov 25, 2024