Re: Is ruby a good choice for infosec?
KING SABRI <[email protected]> Fri, 6 Dec 2019 12:50:53 +0300
| Newsgroups | gmane.comp.lang.ruby.general |
|---|---|
| Message-ID | <CA+YFDnn+Wvz2=19X68ZAGEkF9aBHAWQbULsFqUn1yEHZpqPkQA@mail.gmail.com> |
--===============0582973533== Content-Type: multipart/alternative; boundary="000000000000727279059905fd64" --000000000000727279059905fd64 Content-Type: text/plain; charset="UTF-8" Hi Short answer, infosec community alway has a hype. 10 years back, the hype was Perl, then javascript, then PowerShell, then Python, now it's C#, Go and Rust. So if you are looking for the hype learn Go and C#. However, all languages are great and can fill almost everything you need. Existing external libraries is great. However, these libraries have been built by people who know the language very well. So if you want to build something, you can, but you need to know the language. A library like paramiko is not for infosec, rather, infosec people use it. You can find a similar library (better implementation) in Ruby called net-ssh. Finally, pick the language you want/like. I picked Ruby and I had the same concern you have now. Then, I built https://rubyfu.net while I'm developing myself and I do whatever I want. On Fri, 6 Dec 2019 at 08:53, Carlo E. Prelz <[email protected]> wrote: > Subject: Is ruby a good choice for infosec? > Date: ven 06 dic 19 07:50:44 +0530 > Sorry for the delay! > > > > The internet is full of python for infosec, is ruby a good choice too > ? I > > know metasploit and Ronin are built in ruby but python has more > security > > focused packages like paramiko.. > > What's your take? > > My take is the take of one who is not working in infosec, nor would he, > since information security is an impossible goal to reach, and those > who promise security know, or should know, that they are delivering > hopes rather than certainties. > > Nevertheless, I can intuit that anybody who would really manage to > gain insights and obtain practical results from his work in this mined > field would need to become *very* intimate with the tools he uses. The > best is if he can develop them himself, but even if some pre-made > packages are used, certainly the sheer number of available packages is > not an advantage per se: why have twenty-five types of wrench > available, all with different handles and different build quality, if > the wrench you end up using is always the same one? > > Ruby *as a language* (that is, not because of the libraries it > provides) offers great advantages of expressivity in the code you > write. The good programmer finds this of great value. > > Carlo > > -- > * Se la Strada e la sua Virtu' non fossero state messe da parte, > * K * Carlo E. Prelz - [email protected] che bisogno ci sarebbe > * di parlare tanto di amore e di rettitudine? (Chuang-Tzu) > > Unsubscribe: <mailto:[email protected]?subject=unsubscribe> > <http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-talk> > -- *Thank you!* *Sabri.* --000000000000727279059905fd64 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">Hi=C2=A0<div>Short answer, infosec community alway has a h= ype.=C2=A0</div><div>10 years back, the hype was Perl, then javascript, the= n PowerShell, then Python, now it's C#, Go and Rust. So if you are look= ing for the hype learn Go and C#.</div><div>However, all languages are grea= t and can fill almost everything you need. Existing external libraries is g= reat. However, these libraries have been built by people who know the langu= age very well. So if you want to build something, you can, but you need to = know the language. A library like paramiko is not for infosec, rather, info= sec people use it. You can find a similar library (better implementation) i= n Ruby called net-ssh.</div><div><br></div><div>Finally, pick the language = you=C2=A0want/like. I picked Ruby and I had the same concern you have now. = Then, I built <a href=3D"https://rubyfu.net">https://rubyfu.net</a> while I= 'm developing myself and I do whatever I want.<br></div><div><br></div>= </div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">= On Fri, 6 Dec 2019 at 08:53, Carlo E. Prelz <<a href=3D"mailto:fluido@fl= uido.as">[email protected]</a>> wrote:<br></div><blockquote class=3D"gmai= l_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,20= 4,204);padding-left:1ex">=C2=A0 =C2=A0 =C2=A0 =C2=A0 Subject: Is ruby a goo= d choice for infosec?<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 Date: ven 06 dic 19 07:50:44 +0530<br> Sorry for the delay!<br> <br> <br> >=C2=A0 =C2=A0 The internet is full of python for infosec, is ruby a goo= d choice too ? I<br> >=C2=A0 =C2=A0 know metasploit and Ronin are built in ruby but python ha= s more security<br> >=C2=A0 =C2=A0 focused packages like paramiko..<br> >=C2=A0 =C2=A0 What's your take?<br> <br> My take is the take of one who is not working in infosec, nor would he,<br> since information security is an impossible goal to reach, and those<br> who promise security know, or should know, that they are delivering<br> hopes rather than certainties.<br> <br> Nevertheless, I can intuit that anybody who would really manage to<br> gain insights and obtain practical results from his work in this mined<br> field would need to become *very* intimate with the tools he uses. The<br> best is if he can develop them himself, but even if some pre-made<br> packages are used, certainly the sheer number of available packages is<br> not an advantage per se: why have twenty-five types of wrench<br> available, all with different handles and different build quality, if<br> the wrench you end up using is always the same one?<br> <br> Ruby *as a language* (that is, not because of the libraries it<br> provides) offers great advantages of expressivity in the code you<br> write. The good programmer finds this of great value.<br> <br> Carlo<br> <br> -- <br> =C2=A0 *=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Se la Strada e la sua Virtu' = non fossero state messe da parte,<br> * K * Carlo E. Prelz - <a href=3D"mailto:[email protected]" target=3D"_blank= ">[email protected]</a>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0che b= isogno ci sarebbe<br> =C2=A0 *=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0di parlare t= anto di amore e di rettitudine? (Chuang-Tzu)<br> <br> Unsubscribe: <mailto:<a href=3D"mailto:[email protected]" = target=3D"_blank">[email protected]</a>?subject=3Dunsubscribe= ><br> <<a href=3D"http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-talk= " rel=3D"noreferrer" target=3D"_blank">http://lists.ruby-lang.org/cgi-bin/m= ailman/options/ruby-talk</a>><br> </blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr"= class=3D"gmail_signature"><div dir=3D"ltr"><div><div dir=3D"ltr"><div><br>= <font color=3D"#000000"><b>Thank you!</b></font></div><div><font color=3D"#= 000000"><b>Sabri.</b></font></div></div></div></div></div> --000000000000727279059905fd64-- --===============0582973533== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline Unsubscribe: <mailto:[email protected]?subject=unsubscribe> <http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-talk> --===============0582973533==--