Esparta 
@esparta@ruby.social
Joined Aug 2018
Esparta
boosted
boosted
JShelter 0.10 was released today! Several new protections and bug fixes can be found in this release that will help protect your privacy while browsing. https://u.fsf.org/3lb #JShelter #SoftwareFreedom #FreeJS
Salubrious Ruby: Don’t mutate what you don’t own, by Tim Riley
> When we’re writing a method in Ruby and receiving objects as arguments, a helpful principle to follow is “don’t mutate what you don’t own.”
https://timriley.info/writing/2022/04/28/salubrious-ruby-dont-mutate-what-you-dont-own/
----
Tim is 100% correct - IMHO
Esparta
boosted
boosted
To help some of the newcomers make connections: name 5-7 things that interest you but aren't in your profile, as tags so they are searchable. Then boost this post or repeat its instructions so others know to do the same.
P.S.A - RubyonRails have a new security release fixing two XSS vulnerabilities for all supported versions, pushing the current stables to these:
- 7.0.2.4
- 6.1.5.1
- 6.0.4.8
- 5.2.7.1
Notes & updates here: https://rubyonrails.org/2022/4/26/Rails-7-0-2-4-6-1-5-1-6-0-4-8-and-5-2-7-1-have-been-released
CVE-2022-22577
https://discuss.rubyonrails.org/t/cve-2022-22577-possible-xss-vulnerability-in-action-pack/80533
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22577
CVE-2022-27777
Una de las ventajas de los modos de publicación es que tus toots pueden ser enviados con varios tipos de alcance:
- public: default y bastante obvio
- unlisted
- followers-only
- direct
Por ejemplo este toot no va a ser visto en el timeline público, pero como te menciono tu puedes ser notificado y todos los demás no tienen que _joderse_, @porras
You probably didn't notice but one of the cornerstones of the ruby development has been changing for good: mail gem
https://rubygems.org/gems/mail
A few days ago this PR by Deivid Rodriguez was accepted by the maintainers and it's all good news 🎉
https://github.com/mikel/mail/pull/1478
Basically the mail gem moved their minimal ruby version to 2.5 from a very old ruby 1.8.
I get the idea of supporting more systems, but supporting a 20 year-old ruby version has been dragging the project for a while - IMO.
Welcome to the new & returning ruby.social users. Hope we can engage better this time.
Please try to follow up other peers, create your #introduction and pin your toot.
Remember this is not a "new twitter" the idea is kind of different. You can check @feditips to get more insights about how the federation works and how to have a better integrated environments.
P.S. there's no edit feature, but you can delete & redraft as I did with this toot.
Esparta
boosted
boosted
New people, welcome to Mastodon and the Fediverse!
Here's how to get started:
1. Find some people to follow over on @FediFollows, and through Trunk (https://communitywiki.org/trunk)
2. Find out your Mastodon/Fediverse address so you can share it with friends (https://mstdn.social/@feditips/107248252715651564)
3. Invite people to join you on here by telling them to go to https://joinmastodon.org and click on "Get Started". It doesn't matter if they join a different server because the servers talk to each other (here's a bit more of an explanation https://mstdn.social/@feditips/107021461185874594)
4. Find out what the Fediverse is (https://mstdn.social/@feditips/107044096139091624)
5. Find out why Mastodon being on so many different servers/instances is a really good thing (https://mstdn.social/@feditips/107083735491993183)
6. If you see anything nasty, you can report it to your friendly server admin (https://mstdn.social/@feditips/106540152842368591)
7. You can (sort of) verify your account if you own a website (https://mstdn.social/@feditips/106274105538953001)
If you have any questions, @ me or DM me!
Well, Vagrant is broken using ruby 3.1. Sadly the fix I proposed didn't make the cut:
https://ruby.social/@esparta/107440750542292204
Now ruby core maintainers have to backport it:
https://bugs.ruby-lang.org/issues/18570
nobody said support & maintain an open source programming language would be easy.
Ruby on Rails has released v. 7.0!!
This time I had the honor & privilege to contribute with 8 commits.
I'm so grateful for maintainers and contributors who #keepRailsRelevant
https://rubyonrails.org/2021/12/15/Rails-7-fulfilling-a-vision
There's an interesting bug happening on Ruby's standard library where this code triggers an exception (and it shouldn't, IMO):
IPAddr.new('::1').freeze.to_range
and here's my attempt to fix it:
https://github.com/ruby/ipaddr/pull/36
Got a lot of fun recalling the networking algebra just for the sake of having tests to support the patch - there were no test for `to_range'
Looks like we will have yet another security-related release for ruby.
A patch has been merged to the main branch:
https://github.com/ruby/ruby/pull/5239
But the Hacker1 entry is still not public yet;
AppSignal: To concern or not concern
https://blog.appsignal.com/2020/09/16/rails-concers-to-concern-or-not-to-concern.html
After 6 years of using Rails I'm still not sold of use concerns to simplify mixins.
Surely has their use cases but there's definitely better ways: containers, dependency injection, abstractions, or even plain modules.
"It's a concern when you start using Rails' concerns"
New live coding of https://exercism.io with #ruby track: Matrix
This was particularly nice to do with #TDD & memoization
Continuing #ruby track at https://exercism.io : High Scores
You may not be aware of this, but there's a lot of coordinated efforts to a better documentation of Ruby core classes & the standard library.
People like Burdette Lamar, Eric Holden (drbrain) and others has been nailing it going method by method doing a better docs.
Today Jeremy Evans proposed a "Method Documentation Guide" for this:
https://github.com/ruby/ruby/pull/3999
It's really nice to see this happening, if you are privilege enough to help, please do. The ruby ecosystem need your help.
Esparta
boosted
boosted
Me, the genius: I think I'll use asdf-vm in this old RaspberryPi
Me, the genius, a few minutes later, realizing it would take more than 20 minutes the `asdf install Ruby 2.7.1`
Esparta
boosted
boosted
Next time you think your data is not valuable remember these images.
This is what I can track in my local network. Nice graphs and metadata I got without any fancy nor expensive technology: around $0 since it's produced by my EdgeRoute X & PiHole.
Imagine this kind of data aggregated by your ISP or "no logger ever" VPN provider.
Esparta
boosted
boosted
Not sure how developers can sleep having code like this:
return input.scan(/^\d*/) && $&.to_s
So, the reader/maintainers should read it says:
> Return the prefix of the string consistent of only numbers, otherwise an empty string. Note: no empty spaces allowed at the beginning of the input.
Yes, I do #hateRegex
Joined Aug 2018
