tenderlove

6 ms·

1.
KindaRails2Shell – Critical RCE in Rails via Active Storage(ethiack.com)
6 points by tenderlove 2mo ago|0 comments
2.
Possible arbitrary file read and remote code execution in Active Storage(github.com)
5 points by tenderlove 2mo ago|0 comments
3.
by tenderlove 3mo ago
RubyGems.org backfilled older releases with `created_at` fields, so theoretically you could still do the cooldown with very old gems (though I don't know why you would). It's only private / alternative gem servers that may no
4.
A new register allocator for ZJIT(railsatscale.com)
55 points by tenderlove 4mo ago|6 comments
5.
by tenderlove 1y ago
This absolutely happened and is not speculation. I can't find the emails from the individuals that emailed me, but I did find my email to the board of directors asking that the website language be changed because people had pinged me t
6.
by tenderlove 1y ago
As I said in my blog post, it imports both and combines them in the UI. Also as I said in my blog post, I switched to shooting only in raw, and it still exhibited file corruption.
7.
by tenderlove 1y ago
> That's a mistake no mater what application you're importing to, else we'll be graced with another blog post, "Darktable app Corrupts Photos" Thanks dad.
8.
by tenderlove 1y ago
This is also my guess. It's really a bummer, and I'd report it to Apple but since it's nondeterministic I have no idea how to provide repro steps.
9.
by tenderlove 1y ago
Here you go! https://gist.github.com/tenderlove/25853f50ab46a58738ff2cc22d682f2b I ran both files through xxd then diffed them. I've literally changed every piece of hardware (at no small cost). "prema
10.
by tenderlove 1y ago
Thank you! Wish it had panned out for Class#new, but I don't feel bad about doing it. :)
11.
by tenderlove 1y ago
> Yes, but if it ends up creating any ephemeral objects in the process of determining those returned objects, then the allocation sequence is still not homogeneous. Yes! People might do `map` transformations, but it's very common to
12.
by tenderlove 1y ago
One reason is that we think we can make better use of registers. Since LBBV doesn't "see" all blocks in a particular method all at once, it's much more challenging to optimize register use across basic blocks. We'v
13.
by tenderlove 1y ago
It's not being abandoned, we're just shifting focus to evaluate a new style of compiler. YJIT will still get bug fixes and performance improvements. ZJIT is a method based JIT (the type of compiler traditionally taught in schools
14.
by tenderlove 1y ago
It says on the website it's 12x faster so it must be true! https://rubyui.com
15.
by tenderlove 2y ago
libffi can't know how to unwrap Ruby types (since it doesn't know what Ruby is). The advantage presented in this post is that the code for type unboxing is basically "cached" in the generated machine code based on the in
16.
by tenderlove 2y ago
I think tenderworks wrote this post.
17.
Optimizing Ruby's JSON, Part 5(byroot.github.io)
7 points by tenderlove 2y ago|0 comments
18.
by tenderlove 3y ago
Thank you! Ya, I really enjoy pattern matching. I think new language features just take a long time to percolate through the community. I remember when `->` was controversial, but that's the only way I write lambdas today. :D
19.
by tenderlove 3y ago
I didn't know it was controversial either! D:
20.
by tenderlove 3y ago
This is great to hear. <3
21.
The looming demise of the 10x developer(blog.testdouble.com)
13 points by tenderlove 3y ago|2 comments
22.
by tenderlove 3y ago
While RUM is out of date, I still think it's an excellent resource. Some of the information in the book may be out of date, but I think it's an excellent place to start when you want to jump in to Ruby's source. Basically,
23.
by tenderlove 3y ago
This guide is interesting but extremely out of date. I recommend Ruby Under a Microscope[1] though it is also out of date as well (but less out of date than the Ruby Hacking Guide) 1. https://nostarch.com/rum
24.
by tenderlove 3y ago
Use a password manager with autofill so you'll make no mistakes where you are
25.
by tenderlove 3y ago
I hope that you'll watch the recording of the talk when it's released. The context of the "cliche" is with regard to the community, the framework, and why Eileen continues to remain on the core team. It's nothing
26.
by tenderlove 4y ago
> I've seen different people mean different things by this, do you mean the IR is a list of bytecode handler addresses, and then the end of every handler is a load+indirect jump? Or is there also a dispatch table? In my experience t
27.
by tenderlove 4y ago
I'll take a stab at this. YARV (Ruby's VM) is already direct threaded (using computed gotos), so there's no dispatch loop to eliminate. YARV is a stack based virtual machine, and the machine code that YJIT generates writes t
28.
by tenderlove 4y ago
Yes!!!! My plan is to make a promotional video with Euro Beat music. I also want to feature "multi-line editing!"
29.
Initial V: a BMW shifter turned Bluetooth Keyboard(github.com)
4 points by tenderlove 4y ago|0 comments
30.
by tenderlove 4y ago
Maybe we could do something like reparse the line and check the arity? We know the reader doesn't take a parameter, but the user clearly provided one, so maybe we could eliminate suggestions that have the wrong arity.

More ›