
Security News
Follow-up and Clarification on Recent Malicious Ruby Gems Campaign
A clarification on our recent research investigating 60 malicious Ruby gems.
sixarm_ruby_password_salt
Advanced tools
Password tool to create strong user-friendly salt for hashes, using Ruby's secure random cryptographic functions.
For docs go to http://sixarm.com/sixarm_ruby_password_salt/doc
Want to help? We're happy to get pull requests.
Install:
gem install sixarm_ruby_password_salt
Bundler:
gem "sixarm_ruby_password_salt", "=1.3.-"
Require:
require "sixarm_ruby_password_salt"
To enable high security for all our gems:
wget http://sixarm.com/sixarm.pem
gem cert --add sixarm.pem
gem sources --add http://sixarm.com
To install with high security:
gem install sixarm_ruby_password_salt --test --trust-policy HighSecurity
Generate a salt:
require 'sixarm_ruby_password_salt'
PasswordSalt.new => "ezkabtsu"
This generates a secure random 8 character salt of all lowercase letters with 26^8 combinations. This can easily be sent via web URIs, email, etc.
Ruby 1.8.6 and older does not have a secure random number method, so this gem checks to see if the SecureRandom class is defined; if it is not, then we require our sixarm_ruby_secure_random gem.
You may choose any of these open source licenses:
The software is provided "as is", without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose and noninfringement.
In no event shall the authors or copyright holders be liable for any claim, damages or other liability, whether in an action of contract, tort or otherwise, arising from, out of or in connection with the software or the use or other dealings in the software.
This license is for the included software that is created by SixArm; some of the included software may have its own licenses, copyrights, authors, etc. and these do take precedence over the SixArm license.
Copyright (c) 2005-2012 Joel Parker Henderson
FAQs
Unknown package
We found that sixarm_ruby_password_salt demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.
Research
/Security News
A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.