robconery

Most people used canned packages in Rails with something like Devise. Looking at the source it looks like the token is pulled right off the params:

https://github.com/plataformatec/devise/blob/master/app/cont...

The reset routine uses Rails finder mechanism to do just what the OP discusses:

https://github.com/plataformatec/devise/blob/master/lib/devi...

I don't use MySQL because for reasons just like this - so I'm not all that surprised. That said - it would be interesting to see Devise put to the test to see if it is indeed a problem for Devise.

This is not, however, a Rails issue.

Outstanding comment - balanced, thoughtful and carefully worded. Nicely done and I completely agree.

All web frameworks have vulnerabilities - the key is how quickly the team responds. For that, I love Rails (and @tenderlove)

I dunno. It seems like the future is arguing about Hypermedia. If the idea doesn't take hold ... is that our fault as developers? It reminds me of the OpenID hype - engineers solving a problem that doesn't exist or, worse yet, solving a future problem that has yet to materialize.

If the answer to this is "educate people" then that's the wrong answer. Or maybe it's the right answer if you're an IT type that loathes their users. I know I might sound crusty about all of this but how many years are we going to chase an idea that only a few people seem to understand?

Can we just admit it, right here, right now: all of this is academic. We should be focused on extracting patterns and practices that provide value and cycling on that.

The rest is noise.

We do all kinds of screencasts - I'm editing one about ActiveAdmin on Rails right now, and we also have many other formats (.NET, some Rails) - not all just Javascript.

That said - Destroy All Screencasts is great (https://www.destroyallsoftware.com/screencasts), and PeepCode has terrific Play by Play stuff with Gary Bernhardt which I can't recommend enough: https://peepcode.com/products/play-by-play-bernhardt.

He also has Ryan Singer and Yehuda Katz doing their thing... great stuff.

I've been the victim of that flaw - I biffed a Rails migration and sent (what should have been) $200 transactions into the DB as $99. My local tests used SQLite, so I didn't catch it until we went live - true deal there. Very dumb on my part.

At the same time - changing data values not stupid? We may differ on this point but I believe it's insanity. I'd love to see NULLs honored as well as constraints.

That said - 1/0 = NULL is on par with Javascript silliness.

Finally, it's easy to characterize my comment as FUD but Oracle has a habit of using Open Source systems to its advantage. Why else would they buy MySQL? And the licensing is not as strong as you may think.

Either way - it's very argumentative and I'm happy to agree it's unsure at best.

Other way around - I like Postgres a lot, so I talk about it and do videos.

Yep - easy to alter the defaults. My point was that these are the defaults which I consider silly.

Navicat - it's a great GUI

> our data which is partitioned by week then organized according to a hierarchical triangular mesh with bitmapped indexes

Sounds like you're getting your money's worth out of Oracle - which is a good thing. For many others (especially those in the .NET world) they use very few of the high end SQL Server stuff.

Why does it need to be clear? That is the point - I'm challenging people to think, solve, see what's happening and digest the code - and yeah I know some people won't like it. In fact I want those people to hate it. I have a sore spot with the "entitlement crowd" who need everything wrapped up sweetly with a bow - the ones who sit on their laptops in the back of the room, geek out on Twitter, and then give your talk a low rating because it was "boring slides".

Is it hard to figure out that it's CoffeeScript? I don't think so - specifically because I said that it was CoffeeScript in the beginning. You just had to read it :).

And yes! Strings resolve to true :). Madness that people got to figure that out with some code, and not a bullet point slide!

:)

Async controllers don't solve this problem, they actually create 10 more. Same with tasks - you have thread locking issues, race conditions and other fun async stuff at the thread level. Node is single threaded, (basically) single process.

I get your point - that it's possible (it's always been) - it just isn't the way 99.99999% of the people use it.

I get my mojo going after a bit. I was going to use Vim - but I thought I would lose most people (it's a .NET-oriented conference).

I did :). That part didn't make it into the video.

It wasn't directionless, despite how it seems. I had a very clear-cut script and every demo was scripted to the letter. My problem was that I didn't have time to memorize it.

And yeah, in the beginning I just flailed with the file names. Ack! I had run through this talk 12 times - it needed 12 more run throughs.

Music... it's Daft Punk... can't please em all I suppose :)

It was Mocha with CoffeeScript, not Ruby. It actually didn't come off "wrong to most people" - it was exactly 12 who left and didn't like it. Currently it's the second most watched video from the talk, and the organizers have told me it was in the top 5 in terms of interest and people's "choice".

Ultimately, I'm sorry you didn't like it, but it's disingenuous for you to paint it as a failure.

LOL the image I was going to use in the header was Daenaerys - but thought it went a bit too far. PJ Harvey is a hero, so I decided she should sit atop the post.

The trick in pulling this article off is you can go too far with your stereotypes and "artistic license" - actually offending the people you're trying to defend.

And I've worked there - in a place where gay men outnumbered the men. I've been cornered - shoved in between two refrigerators while a guy who outweighed me by 50 pounds leaned against me and went for my bits - all the while telling me "it's time to come out".

I put my fist into his sternum as hard as I could. He laughed - "feisty! I like it..." and he backed off.

This happened. But what's the point of this story? That gay men can be aggressive? That I was "wronged"? That I can somehow identify with women because I was, literally, assaulted at work?

Does your local library push videos of Hot Library Chicks dancing around poles while male library guys rap in their face? (referring to the Nokia Vimeo video).

This isn't about gender divide, it's about a complete lack of understanding.

You're being a tad too literal with your critique (if I may). The whole point is to take you into a realm that's utterly absurd from the male perspective -- which is entirely my point in writing this.

Yes, male nurses face weird moments in life - but as you say it's mostly from other men. That has nothing to do with being a woman in the tech industry who get to listen to cracks about "being on the rag" or PMSing when they're aggressive.

Next time you're with a female coworker, notice how often you and the other men in the group look at her chest. Notice how often she ignores this and how completely oblivious the other men are that she's overlooking their behavior. If you don't believe me - and if you know this woman well enough - ask her.

You'd be surprised the shit women deal with.

"design and quality only appeal to a subset of consumers"… so this means what exactly? Microsoft isn't focusing on design and quality? Who doesn't care about these things? How can that possibly be a separating factor?

People have been repeatedly stating that "Apple risks losing its dominance based on its closed system" - and that has never materialized. Yet people still say it. VentureBeat keeps writing it. And if anything - Apple has proven the exact opposite.

Its iPhone division makes more money than all of Microsoft. That very division is based on the premise that people do care about design and quality. How can the author possibly ignore this?

I, for one, am hoping Apple gets a challenge in this space. Competition is good for the consumer and right now it's a one-horse race and Apple is completely crushing the competition by not even trying to compete. Think on that - they just push new products, and everyone else scrambles to try and differentiate themselves… and they fail!

Someday Apple will have competition in this arena. And of all the candidates out there I can see it being Microsoft. The company is quite strong and if Ballmer finally gets the boot - yes I can see a new wave of optimism and effort here. Maybe.

To suggest that it's in the offing right now? With what - a consumer preview of Windows 8 that no one really likes? I don't know how you can put your name to that article.

Thanks - really appreciate that :)

Phil also invented C#, the Faux Hawk, and Daft Punk

What would that be exactly? Could I apply the same thing to this comment?

Completely agree here. Ramsey is about shock value - something that's incredibly cliche. You have to be damn good to be able to pull it off. 99% of the wannabe-dhh's out there aren't.

That was the what I tweeted when I wrote it - I think the submitter just used that text instead of my title (it wasn't myself who submitted it).

RE F-bomb, I think it's sorta synonymous. Just another way of saying the word.

I think he's referring to "eloquent swearing" - meaning that Ramsey doesn't just drop an F-bomb, he does it with style :). I've heard some great ones from him - once he described a burnt omelet (I think that's what it was) as "something that dropped out of my dog's fing a*hole". You can't help but laugh at that visual.

It's not a camera - well not entirely :). It's a rendered star field that moves with your orientation in 3D space.

I think Star Walk is up there in terms of top apps - most people I know have it installed on their phones and iPads. It's a sensational application.

Absolutely true - I'll add that later this week! Edit: Fixed just now.