38 ms·

C#/.NET is also not mentioned. Clearly I'm out of touch, I hadn't realized that Rubinius and JRuby were more popular than C# and VB.NET. Anyone have any idea if

C#/.NET is also not mentioned. Clearly I'm out of touch, I hadn't realized that Rubinius and JRuby were more popular than C# and VB.NET. Anyone have any idea if/how .NET might be impacted by this?

dchest 15y ago
There's ASP.NET.
Groxx 15y ago
They mentioned .NET in the video that sonnym linked here: http://news.ycombinator.com/item?id=3402152 http://news.ycombinator.com/item?id=3402152 Sorry, I was skipping through it at that point (2/3 of the way through?), I don't know what their conclusion was. I think they said that it was partially different but still likely attackable, but I didn't catch it all.
philjr 15y ago
Very vulnerable, it uses a variant of DJB's common hash functions. Check out the youtube video posted elsewhere in the thread for a great summary
Encosia 15y ago
Vulnerable, but a patch is being released tomorrow night: http://weblogs.asp.net/scottgu/archive/2011/12/28/asp-net-security-update-shipping-thursday-dec-29th.aspx http://weblogs.asp.net/scottgu/archive/2011/12/28/asp-net-se...
- ams6110 15y ago
  From that link: On Dec 28th 2011, details were published at a security conference describing a new method to exploit hash-table data-structures From what I've been reading, this sounds like something that's not new at all and in fact has been an open vulnerability for years.