Metaprogramming in Ruby and doing it wrong.

Presented at DerbyCon 6.0 Recharge (2016), Sept. 23, 2016, 5:30 p.m. (25 minutes).

Ruby is a powerful programming language, it includes way to write dynamic code at run time, this is called metaprogramming. Meta-programming, everyones favorite Rubyism to hate. It can lead to less code, more abstraction and tears of pain and sorrow. During the review of lots of Rails and Ruby applications we’ve see how metaprogramming has lead to some really interesting but terrible security flaws. In this talk, we’ll do a deep dive into examples of how metaprogramming can bite you in a big way.

Presenters:

• Ken Toler

Similar Presentations:

• NorthSec 2017 / Script Engine Hacking For Fun And Profit
• DEF CON 29 (2021) / Instrument and Find Out: Writing Parasitic Tracers for High(-Level) Languages
• ShmooCon XV (2019) / Writing a Fuzzer for Any Language with American Fuzzy Lop