Hacker News Reader

You can put `rack-mini-profiler` behind authentication. It is not enabled by default in production. I believe I mentioned this in the article, if not, it's in the README.

View on HN

I agree with rubiquity - the article as written strongly suggests that users enable it in production. I'd amend it to be far clearer about what you mean. Directly from the second paragraph:

> The best part - rack-mini-profiler is designed to be run in production. Yeah!

Then later:

> rack-mini-profiler is designed to be used in production.

I would try and word it more carefully. The phrase "in production" has serious meaning. I think that's what startled myself (and it seems like some others, too).

Although your take away may have been that everyone should enable it in production. I think every developer should use common sense and practical knowledge when implementing a feature in their application. If you want to use it you should know that having this available for all users is not a great idea, and use it accordingly.

You would be surprised by the lack of common sense in the software community. Maybe even more so in Ruby/Rails. As an example, there are a lot of people running WEBrick in production.

Reply on news.ycombinator.com