Object deserialization attacks using Ruby's Oj JSON parser

Comments (1)

Lio · 2m ago

I think that in 2025 the standard ruby JSON library is now finally faster than Oj so it’s pretty it’s one more external dependency we can remove.

Thanks for your service OJ, you were very helpful for a long time.

Does visualization help AI understand data? (arxiv.org)

Worlds Largest "Vibe Coding" Hackathon Winner (twitter.com)

Sapients paper on the concept of Hierarchical Reasoning Model (arxiv.org)

Beyond Food and People (aeon.co)

Fragmentary Latin inscriptions can be completed with AI (economist.com)

First release candidate of systemd 258 is here (theregister.com)

When We Get Komooted (bikepacking.com)

AWR6843AOP – Single-chip 60GHz radar sensor with antenna on package, DSP and MCU (ti.com)

Linux on Snapdragon X Elite: Linaro and Tuxedo Pave the Way for ARM64 Laptops (linaro.org)

Development shells with Nix: four quick examples (michael.stapelberg.ch)

Releasing a Python Library for Deploying Agents with Microsoft Azure

Christopher Lasch, Plain Writing, and Democracy (providencemag.com)

Specials (2021) (brendangregg.com)

TimescaleDB-Art (blog.cloudflare.com)

The RomM Project: all-in-one app for managing your game collection (romm.app)

Show HN: ClosedLinks

The 14 Pains of Billing for AI Agents (arnon.dk)

Hey 37signals (37signals.kawaicheung.io)

Show HN: I built AI chat for entire YouTube channels (transcribr.io)

Pair Programming with ChatGPT: An Experience Report (brainbaking.com)

Runtime over Syntax (devpoga.org)

The Chaos of AI Agents [video] (youtube.com)

Echelon Kills Smart Home Gym Equipment Offline Capabilities with Update (arstechnica.com)

Unix had good reasons to evolve since V7 (and had to) (utcc.utoronto.ca)

Meme Coldplay Generator – Create a Coldplay Meme Instantly (memecoldplay.com)

PyDCSL (Widevine Revocation List Checker) (pypi.org)

Actual Size Online Ruler (Mm,Cm,Inches) (anruler.com)

Show HN: Interactive scavenger hunts based on audio (zaphunt.com)

Ham Radio Users Clash with Starlink Rival AST SpaceMobile over Spectrum Use (pcmag.com)

Securing EV Charging Networks (sinoevse.com)

Efficiency of a Sparse Hash Table (ashutoshpg.blogspot.com)

Ask HN: Can anyone here confidently say they've been replaced by AI?

Generative AI Is the Marshmallow Test (timothyburke.substack.com)

.NET 10 Preview 6 brings JIT improvements, one-shot tool execution (infoworld.com)

Doctor's note no longer excuse for absences at TN school district (wsmv.com)

Show HN: Historical GPX Wind Visualizer (github.com)

What happens when language gets a soul–but freedom remains the missing piece?

Sam Altman warns there's no legal confidentiality using ChatGPT as a therapist (techcrunch.com)

Bishop in dressing gown interrupts church concert asks crowd to 'leave my house' (news.sky.com)

Jamie Lee Curtis lets rip on plastic surgery, power, and Hollywood's age problem (theguardian.com)

LSM-2: Learning from incomplete wearable sensor data (research.google)

4k NASA employees opt to leave agency through deferred resignation program (kcrw.com)

Three HTTP versions later, forms are still a mess (yorickpeterse.com)

Show HN: Cipher Tools Hub – 50 free utilities for devs, hackers, and creators (ciphertoolshub.com)

Niche Creator Monetization (tinyidea.net)

Monitoring K8s using a combo of daemonset/deployment of OpenTelemetry Collector (signoz.io)

A Food Reckoning Is Coming (theatlantic.com)

Why Cursor is a great company (zandrey.com)

Cara Membatalkan Pinjaman LazBon LazaDa

CachyOS Kernels Based on Different Schedulers and Performance Improvements (github.com)

Object deserialization attacks using Ruby's Oj JSON parser

Comments (1)