3 ms·
Since it's Ruby, wouldn't any supply chain hacks have access to the source code, and thus the decryption key?
by nicoburns 5y ago
Since it's Ruby, wouldn't any supply chain hacks have access to the source code, and thus the decryption key?
- itake 5y agoTrue, but if the attack isn't targeted to the application, the attacker may naively just dump the `ENV` object instead of trying to it in the gem's memory space.