purephase

Very cool resource. Thanks for sharing.

PD has development offices in TO? Awesome! Love these guys. Good to know.

Some ruby devs do, yes. Sadly, this feudalistic approach is prevalent in our industry which hurts all of us. It is probably the reason we have to keep re-learning the same concepts over-and-over again.

There is no karma here, there is just a race to the bottom for all of us. I thought the point of OS was for us all to group together and find and address these issues?

You know, kumbaya and all that...

Other than ease of setup, I've never understood why you wouldn't develop in the same environment as what you're running in production. Setting up a vm is trivial and allows you to easily open/close access to your application as needed.

There is also a lot less headaches once you've decided to move it into production.

gemspecs/Gemfiles rarely list the gh repo, so you'll likely have to get it from a source which is probably rubygems. If it's compromised, they could update the gh repo location as well.

I'd love to. Any helpful guides on how to proceed?

Whitelisting is what Rails did to get around the mass assignment issue. It was solved for awhile, it just was not the default configuration setting.

Whitelisting is what the rubygems folks are doing to work around this problem until a better implementation is put in-place in the YAML parser.

Generally, it is a better solution but it is more difficult and can break a lot of dependencies if not implemented correctly.

As a temporary workaround until Psych is updated. At least that's how I read it.

We can either sit around throwing stones at them or pull up our sleeves and help. I'm not sure what there is to gain with the former.

Probably not safe enough as most of them probably list external dependencies that will fall back to rubygems.

Different issue altogether. It was mass-assignment wherein the default Rails config did not have the whitelist enabled by default. The howto is here:

http://homakov.blogspot.ca/2012/03/how-to.html

Pretty good breakdown going on here [1]. To be honest, while the chosen tool to provide the update is odd, it is one of the best post-mordems that I've seen and applaud the volunteers for taking it so seriously.

1. I wouldn't say so. Not until they're all the way through.

2. Not at the moment, but general guidance is that we should all have local gem repos that we maintain ourselves and only rely on external sources when needed. It is something I'm going to look into ASAP.

[1] https://docs.google.com/document/d/10tuM51VKRcSHJtUZotraMlrM...

It's even easier than that. I know of local stores in my area (heart of the GTA) that sell them over-the-counter. You just have to know how to ask.

I agree. I don't know the game, but it seems likely that there is more to it than your first example. I doubt that they would be reacting the way they are otherwise.

Of course, this might be my own misplaced optimism.

My guess is that the content used in the game may have been garnered from his day job, and therein lies the risk.

In a way that almost all devices now look similar to an iphone I guess. I've held the Z10 in my hand and it is definitely different.

BlackBerry is very popular in the UK and it is a larger market. Canada is only a few days away. I imagine it has a lot more to do with the carrier acceptance process then anything RIM (now BlackBerry) has done.

Thanks. I'll check it out.

I tried to develop an epub reader app for BB10 using their HTML5 webworks toolkit. I know it is probably not the best platform for this given the XML work required for the format, but I couldn't get past the "open a file on the device" step. A quick look through their developer forums showed a lot of people with the same issue.

Oh, and I'm also not experienced with developing apps for any BB platform so I admit that I'm definitely part of the problem.

That being said, I'm rooting for them. The space needs a third player. They really need to figure out simple things like this though.

Is this maybe an opportunity to re-evaluate the volunteer only aspect of RubyGems? I love the service (as I'm sure thousands of others do) and I'd happily pay for a subscription model that would fund a full-time developer/maintainer for the service. Based on how critical it is to the Ruby community I can't imagine that I'm alone in thinking this.

Just a suggestion!

Context: http://techcrunch.com/2012/08/28/talented-shirley-hornstein/

I had the same experience. I signed-up, then turned up all of the privacy settings just so I could use it to test oauth, then FB disabled my account. I guess it's suspect when you turn off all of the account features.

I tried to explain what I was using the account for to their account reps, but they wouldn't unlock it unless I sent them the ID scans. I can't believe that there is not a bigger uproar about a non-governmental, for-profit asking for government issued ID, in electronic format no less, that relies on the unwitting user to hide pertinent data prior to scanning it.

Fucking ridiculous if you ask me. Instagram should be equally ashamed of themselves.

While not as sensational, I did once buy into this line of reasoning when it came to procreation. Then I realized that we live in the most peaceful world that's ever existed, with the best medicine/life expectancy, most amazing technology, and with so much yet to discover and further improve life.

It's a copout. We're not optimistic, you're pessimistic and cynical. Let others choose the lives they want to live, with whom they want to live them because we only have this one life.

It may not mean much in the long-tail of human experience, but the moment you look into the eyes and hold your own child is one of the most amazing experiences I've ever had. I wouldn't trade it for anything.

Definitely. Why do you think we wouldn't have a problem with it? Probably more so than the US as we provide more social assistance programs.

Here's an article about this published today: http://www.thestar.com/news/canada/article/1319286--immigrat...

Very cool. Just picked-up a few certs from them and I need to register a few domains soon. They'll be my first choice.

Thanks! I appreciate the breakdown.

As a unicorn/thin user, could someone briefly explain what the differences are in this release that might convince me to give Passenger a shot? The out-of-band improvements are already there in Unicorn.

The phones themselves... ?

Honestly, I used the N4 for a few hours and was left wanting. The size of the device really throws me off because I can just barely use it with a single hand, and it is extremely awkward.

It may not sound important, but as a parent of a 5mth old, being able to use a device with a single hand is essential.

I've never been a fan of the Nexus product line, so hopefully a company with a better design ascetic. The HTC/Samsung/LG triumvirate clearly focuses on a market saturation instead of flagship products. Frankly, I'm a bit shocked that none of the other manufacturers have tried shifting focus to less, but much better handsets.

RIM is trying it now though, so I guess we'll see how that works out for them.

The holy grail for me (and one that keeps me on iOS) is hardware. Apple knows this, which is why they are so aggressive in patent submission and litigation. Android terrifies them.

If Samsung/LG et. al. could make a somewhat more affordable handset with the design ascetics of an Apple device that ran stock Android, it would seriously disrupt Apple's position.

I had hope for Intel's concept phone [1], but it doesn't look like it manifested in the way it was originally sold.

1. http://www.businessinsider.com/intel-medfield-concept-phone-...