[Rubygems-developers] More work on the remote installer

Mauricio Fernández batsman.geo at yahoo.com
Wed Dec 1 09:32:28 EST 2004


On Wed, Dec 01, 2004 at 02:25:46PM +0000, Hugh Sasse Staff Elec Eng wrote:
> On Wed, 1 Dec 2004, Jim Weirich wrote:
> 
> >I am continuing my work on the remote installer.  Recent changes include :
>         [...]
> >(B) Add support for a writable per-user source info cache for use when the
> >global cache cannot be written.j
> 
> Nobody has responded to my remarks about possible denial of service
> attacks by users if data from this is merged with the system cache.
> Have I misunderstood this?  Is there no way a user can damage the
> site-wide data if they choose?

If I've understood it correctly, the per-user cached data would never
be merged into the system cache.

-- 
Hassle-free packages for Ruby?
RPA is available from http://www.rubyarchive.org/


More information about the Rubygems-developers mailing list