Show newer
James Adam boosted

I often hear that the increased hosting costs associated with Ruby on Rails' larger than average footprint is more than offset by the increased dev productivity. It follows that Rails salaries being pretty high at the moment is offset by being able to maintain a smaller, more productive team.

Does anyone know of any case studies where someone's actually done the numbers on that?

It "feels right" to me, but I'd be interested to read other's experiences.

James Adam boosted

Finally a writeup for the rubygems.org vuln, CVE-2022-29176. Such a simple mistake. I feel like the take away lessons are:

1. do not query/trust composite columns. Query individual columns.
2. do not trust arbitrary user Strings.

greg.molnar.io/blog/rubygems-c

James Adam boosted

P.S.A: Rails have released a new version fixing some issues added on the last security release.

rubyonrails.org/2022/5/9/Rails

The new stable versions have been pushed to these

- 7.0.3
- 6.1.6
- 6.0.5
- 5.2.8

These are some of the problems I note in my review:

ruby.social/@esparta/108211719

As usual, it's recommended to test thoughtfully on your staging environments before proceeding to deploy to production.

James Adam boosted

In a code review i suggested extracting a well named function. They replied that it does not add any value to introduce a new function. They're right in the worst way, the computer doesn't care and they don't value the readers.

Do you have suggestions on how to respond to that?

James Adam boosted
James Adam boosted

How're you deploying your applications these days?

I've been chucking stuff on k8s for so long at my job I've lost touch with what everyone else is doing.

James Adam boosted

How do I love Ruby? Let me Enumerable the ways.

James Adam boosted

Ruby developers on Linux, what's your preferred Ruby?

James Adam boosted

Figured this would be a good place to soft launch this. I setup a Discord server specifically for the topic of Ruby & InfoSec. The goal of this server is to help answer questions, educate others, highlight other Ruby InfoSec projects, and counter anti-Ruby FUD with information. If you are interested in both Ruby & InfoSec, or just want to help, consider joining.
discord.gg/CcqkHnuyUK

James Adam boosted

Have you worked on anything cool lately?

I've been looking at a bunch of sites on neocities.org and it's making me want to make my own site much, much worse^H^H^H^H^Hcooler.

James Adam boosted

Working on an idempotent db/seeds set up today for an old rails project. So much better than copying from production. Can’t believe I haven’t done it before.

James Adam boosted

Is there ever a good time to define a custom `!` method on an object? Seems like setting up a footgun for people relying on the truthy/falsiness in a boolean expression.

class Thing; def !; true; end; end
my_thing = Thing.new

do_thing if my_thing# executes
do_thing if !my_thing # executes
do_thing unless my_thing # does not execute

If you're curious about what's happening elsewhere in the Fediverse, you can use either the "Explore" or "Federated" timelines:

#️⃣ - ruby.social/web/explore
🌐 - ruby.social/web/public

The "Federated" one is a bit of a firehose, you've been warned!

Show thread

I regularly check our "Local" timeline to see what people on this instance are talking about:

ruby.social/web/public/local

This is a great way of finding people to follow - because you're on the same instance, chances are you have at least one shared interest :ruby:

Show thread

Once again, welcome everyone who's joined this week so far, and special thanks to @halfbyte and @andy_twosticks for contributing on our Patreon (patreon.com/bePatron?u=1323763) 🎉 :ruby:

James Adam boosted

Welcome to the new & returning ruby.social users. Hope we can engage better this time.

Please try to follow up other peers, create your and pin your toot.

Remember this is not a "new twitter" the idea is kind of different. You can check @feditips to get more insights about how the federation works and how to have a better integrated environments.

P.S. there's no edit feature, but you can delete & redraft as I did with this toot.

Welcome to the influx of folks today looking for Twitter alternatives 🎉 :ruby:

Renewed the rubymanor.org domain for another 9 years, because -- unlike Lanyrd -- cool URLs don't die.

The good folks at Planet Argon are running their Ruby on Rails survey again this year.

If you have a few minutes, share your answers at rails-hosting.com

Show older
Ruby.social

A Mastodon instance for Rubyists & friends