Posts tagged: RAILS

So, a serious security hole in Rails was announced this week. There’s a lot of bashing going on about “security through obscurity.” I’ve always understood STO as sustained secrecy about known (or possible) vulnerabilities, which seems different from the Rails team’s provisional waiting period between the initial announcement and the full disclosure. (And the patches themselves told the story, for those familiar with the source.)

Not that there weren’t legitimate problems with their patch release process. They definitely made mistakes they can learn from.

I wasn’t able to get to OSCON this year, but this photo is definitely a winner in the category of impromptu geek performance art:

Ruby on Rael

The Zend Framework was released a few days ago. This is a PHP5-only web application framework from Zend, “the PHP company.” It has been in development for a long time, but if that had a chilling effect on the development of other PHP frameworks, it’s hard to see.

I’m going to go straight for my grim conclusion here: I think many of the other PHP web frameworks in development have no long-term prayer against Zend. It’s not about technical merits, it’s about the business case that Zend is a safer bet than five random guys with a Trac install and a cool logo.

Yesterday, Ruby on Rails 1.0 was released. It came along with a nice website redesign, too. And some teasers:

Rails 1.1 is already pretty far along in development and will see some of the biggest upgrades of any Rails release. Hopefully some time in February.

Yesterday was the Snakes and Rubies meetup in Chicago, featuring Adrian Holovaty of the Django Project and David Heinemeier Hansson of Ruby on Rails. By all reports it was an informative and enjoyable event, with about 100 to 200 people attending. I’m looking forward to hearing the audio when it becomes available.

In the meanwhile, thinkhole.org has a good roundup of notes and blog postings, and of course there’s always Technorati.