RubyFlow The Ruby and Rails community linklog

×

The Ruby and Rails community linklog

Made a library? Written a blog post? Found a useful tutorial? Share it with the Ruby community here or just enjoy what everyone else has found!

Submit a post

You can use basic HTML markup (e.g. <a>) or Markdown.
Note that your post may be edited to suit the format of the site.

As you are not logged in, you will be
directed via GitHub to signup or sign in

Post Preview

Note: Only the first pargraph is shown on the front page and overly long paragraphs may be broken up.

Afraid of the big nasty gem?

A malicious gem could do pretty much everything on the environment that runs its code, from stealing critical data to taking control over the entire operating system. It may only take minutes for the malicious software to access poorly protected files or to exploit its way up, from running as restricted user to escalating to a privileged user. Read More

Thank you for posting a great article about Gem Security. :)
The title made me think this would be an article about active_support ;)
I really hope active_support is safe ;)

Is MonoLogger safe?

MonoLogger is a “lock-free logger for Ruby 2.0”. It’s actually the exact same as Ruby’s Logger, minus the lock. I wasn’t sure if this was safe, so I did some research. Turns out MonoLogger does the right things to ensure that log messages aren’t interleaved even in the face of multiple threads. Warning: you might learn a thing or two about working with Unix file descriptors!

Temporarily add behavior to objects

The ability to add behavior to an object for a short time can make for some very flexible structures. Casting is a new gem that allows you to run methods from a module at runtime without altering the object’s superclass structure (for example, no need for #extend).

Loading older posts