sebiw

First of all: Huge respect for getting something out the door, looks really useful.

> I'm considering working on this full time. If you have some advice or opportunities on how I can support myself doing this, let me know!

You could consider an "enterprise" tier with a special subset of features and guaranteed support. But my experience tells me this will be really hard to substantially monetize, as the customer profile for that solution is probably not spending on software until they really need to (the saying goes: selling to developers is impossible, you need to sell to their boss). Maybe a donation model or a creator-centric thing could work out!

Source?

Which brings us to the old saying: Do not deserialize untrusted data.

In the context of Rubygems and their specs this obviously is harder to manage but dependencies such as Rubygems are and will always be part of your app's Trusted Computing Base.

At this point, the current BMW has to die and reinvent themselves in a fundamentally better way. Breaks my heart as longtime BMW fan and previous owner of some older models. What have they done to the DNA of that company...

Domain Registrars usually have shitty, subpar DNS eg. without Anycast or DNSSEC.

MacBook Pro M5 Max, 128GB RAM + oMLX|LM Studio|Llama.cpp|etc. + Opencode|etc. + Models from DeepSeek|Qwen|Google. There are alternatives to centralized, cloud-based LLMs!

Shoutout to all the people making Homebrew possible! You rock! Everyone should consider donating to the project: https://opencollective.com/homebrew

Defense in depth is a thing but I agree that relying on it is not a good idea.

> It's not that much work to trust my root certificate on each device

Sure, but is trusting your homebrewed CA on all your devices for essentially everything really a good idea?

When your homebrewed CA somehow gets compromised, all your devices are effectively compromised and not only for local connections, but everything that uses PKIX.

Dogfooding their future products!

Yup, their Git Push Deployment was really a killer concept and a huge gateway for people just writing good apps not needing to care about infra and still being able to get a production-ready setup.

Sustaining as in sustaining their shareholders.

Huh, so that's what they mean when using the word "we". "We" is not Heroku, it's Salesforce.

> helping organizations build and deploy enterprise-grade AI in a secure and trusted way

> Enterprise Account contracts will no longer be offered to new customers

Seems contradictory or I just don't understand how they do product management.

My opinion: Heroku had its time but then stagnated heavily in keeping up with what was going on around it. With the rise of Container as a Service platforms there now were a multitude of more cost-efficient and flexible alternatives which were comparable to the service Heroku offered.

Thanks for sharing. RIP Jim, I miss him being part of the community.

I don't like talking about a heterogeneous group of people in a generally negative way. I try to stick to the people I perceive as sharing the same values that are important to me. And there are many such people in the Ruby community.

I think this is the right move. Thank you to Ruby Core and Matz for stepping up and providing stability to the language and community as a whole.

"Wow" as in "why doesn't Ruby have that already" or as in "parallelism will be great"? :-)

In the current stream of rather disturbing world news and examples for bad applications of capitalism, I just wanted to point to this litte bit of niceness from the indie game development community:

> - Added new map location: Stendo's Firearms Emporium. [...] This is intended as a memorial to Stendo_Clip who was the founding author of the Vanilla Firearms Expansion mod - following conversation with, and permission from, family members.

My two cents having a respectable amount of infrastructure ops experience: Use Caddy to get going quickly and to get a solid setup with minimal effort. Use Nginx if you know what you're doing and want full and deep control over the web server / proxy layer of your stack.

Well, yes and no. The law (which went into effect 2023 BTW) still has a lot of loopholes, e.g.:

> The federal authorities subject to this Act shall disclose the source code of software that they develop or have developed for the performance of their duties, unless the rights of third parties or security-related reasons would preclude or restrict this.

"unless the rights of third parties [...] would preclude or restrict this" pretty much says it all.

Thanks!

Will try it out. Thanks!

Arch Linux uses a native/unpatched version of OpenSSH without dependency on libsystemd and thus without dependency on xz-utils, resulting in no exploitable code path. This means that at least the currently talked about vulnerability/exploit via SSH did presumably not work on Arch. Disclaimer: This is my understanding of the currently circulating facts. Additional fallout might be possible, as the reverse engineering of the backdoor is ongoing.

Nice! What did you do in terms of marketing to get to ~$600 MRR?

Absolutely not connecting with the message. I happily and proudly bought Sublime Text after some time because it's a tool I really like and use pretty much daily. Thanks to the devs for a solid product.

Again?

Solo creator. Never went there. Don't miss anything. :-)

This might be interesting for you people: https://github.com/xnaas/nitter-instances ;-)

You can try Ruby on WASM in action at https://try.ruby-lang.org/playground/ (select "CRuby" in the dropdown).