GoKawiil - Latest Tech News & Aggregated Headlines

How Ruby executes JIT code

news.ycombinator.com Stan Lo 2025-09-26 08:01:53

Ever since YJIT’s introduction, I’ve felt simultaneously close to and distant from Ruby’s JIT compiler. I know how to enable it in my Ruby programs. I know it makes my Ruby programs run faster by compiling some of them into machine code. But my understanding around YJIT, or JIT compilers in Ruby in general, seems to end here. A few months ago, my colleague Max Bernstein wrote ZJIT has been merged into Ruby to explain how ZJIT compiles Ruby’s bytecode to HIR, LIR, and then to native code. It she

Topics: bytecode code compiled jit ruby

Shop Amazon

Rv, a new kind of Ruby management tool

news.ycombinator.com André Arko 2025-10-29 22:15:49

rv , a new kind of Ruby management tool For the last ten years or so of working on Bundler, I’ve had a wish rattling around: I want a better dependency manager. It doesn’t just manage your gems, it manages your ruby versions, too. It doesn’t just manage your ruby versions, it installs pre-compiled rubies so you don’t have to wait for ruby to compile from source every time. And more than all of that, it makes it completely trivial to run any script or tool written in ruby, even if that script or

Topics: install ruby run rv tool

Shop Amazon

Do I not like Ruby anymore? (2024)

news.ycombinator.com Unknown 2025-10-31 13:00:07

Do I not like Ruby anymore? 2024/05/28 I recently started working at a Python shop. The reasons behind this choice of employment are very much unrelated to the technology stack. Python is not my favorite programming language. In fact, allow me to drop the euphemism and express my pure, unadulterated thoughts about it: I never liked Python, I see it as a huge red flag and I think the world would be a better place if we all decided to finally move on from it. With that out of the way, let’s talk

Topics: language python ruby type typescript

Shop Amazon

How RubyGems.org protects OSS infrastructure

news.ycombinator.com Marty Haught 2025-11-01 16:02:51

by Marty Haught Recently, Socket.dev published research highlighting malicious gems designed to steal social media credentials. We wanted to use this as an opportunity to share more about how RubyGems.org security operates, how we proactively handled this incident (and others), and the work our team is doing each day to keep the ecosystem safe. How We Detect Malicious Gems RubyGems.org security uses a proactive and multi-layered approach: 1. Automated detection: Every gem upload is analyzed

Topics: malicious org rubygems security team

Shop Amazon

Marshal madness: A brief history of Ruby deserialization exploits

news.ycombinator.com Unknown 2025-10-30 07:41:33

Documenting the evolution of exploitation techniques serves a crucial purpose in security engineering: it helps us understand not just individual vulnerabilities but the systemic patterns that resist conventional fixes. The story of deserialization exploits in Ruby’s Marshal module offers a uniquely well-documented case study of this phenomenon. That is, a decade-long cycle of patches and bypasses that reveals the futility of addressing symptoms rather than root causes. This history matters bec

Topics: deserialization marshal ruby x06 x10

Shop Amazon

Why we still build with Ruby in 2025

news.ycombinator.com Unknown 2025-11-08 15:42:31

When we started Lago, we picked Ruby on Rails for our core API. The choice was obvious because our founding team had decade of Rails experience. Rails was the fastest way we could build an API product. Today, we’ve receive millions of API calls a day. We’ve upgraded through multiple Ruby/Rails versions. Maybe that sounds silly in a world where young, Python/Go/JS-wielding entitlements have never even heard of Ruby. We do admit that we’ve added Go and Rust where it makes sense. But if we were

Topics: api product rails ruby run

Shop Amazon

All-In on Omarchy at 37signals

news.ycombinator.com Unknown 2025-11-21 05:47:02

We're going all-in on Omarchy at 37signals . Over the next three years, as the regular churn of hardware invites it, we're switching everyone on our Ops and Ruby programming teams to our own Arch-derived Linux distribution (and of course sharing all the improvements we make along the way with everyone else on Omarchy!). It's funny how nobody bats an eye when the company mandate is to use Macs or Windows, but when the prescription is Linux, it's suddenly surprising. It really shouldn't be. Y

Topics: battery early framework linux ruby

Shop Amazon

60 malicious Ruby gems downloaded 275,000 times steal credentials

bleepingcomputer.com Unknown 2025-11-29 22:11:21

Sixty malicious Ruby gems containing credential-stealing code have been downloaded over 275,000 times since March 2023, targeting developer accounts. The malicious Ruby gems were discovered by Socket, which reports they targeted primarily South Korean users of automation tools for Instagram, TikTok, Twitter/X, Telegram, Naver, WordPress, and Kakao. RubyGems is the official package manager for the Ruby programming language, enabling the distribution, installation, and management of Ruby librari

Topics: gems malicious ruby socket tools

Shop Amazon

The /o in Ruby regex stands for "oh the humanity "

news.ycombinator.com Jp Camara 2025-12-13 18:37:51

Your code using the /o modifier Source: wikipedia Hi there! Do you like Regex? Do you like performance? Do you like creating confounding bugs for yourself rooted in the mechanics of the Ruby VM itself? If you said yes to all of the above, have I got a feature for you! But first, let’s start with a story. The cliffs of insanity I was recently reviewing some code, and part of the functionality was about matching. A class took an array of strings, and you could call a method to see if an input

Topics: code end regex ruby run

Shop Amazon

AI coding agents are removing programming language barriers

news.ycombinator.com Stan Lo 2026-01-04 17:39:13

For a decade (2014-2024), I was a Ruby-only developer. I worked across the Ruby ecosystem—from Rails development to Ruby’s core tooling like IRB, RDoc, and the debug gem. But while I moved around the stack, I stayed within Ruby’s boundaries. Ruby wasn’t just my primary language; it was essentially my only language. That changed in 2025. This year, I’ve contributed to Sorbet (C++), worked on RBS’s parser (C), and am now diving into ZJIT (Rust). A combination of factors enabled this shift—someth

Topics: ai language learning project ruby

Shop Amazon

Ruby 3.4 frozen string literals: What Rails developers need to know

news.ycombinator.com Prateek Choudhary 2026-01-28 09:58:26

Ruby 3.4 Frozen String Literals: What Rails Developers Actually Need to Know Ruby 3.4 takes the first step in a multi-version transition to frozen string literals by default. Your Rails app will continue working exactly as before, but Ruby now provides opt-in warnings to help you prepare. Here’s what you need to know. The Three-Phase Transition Plan Ruby is implementing frozen string literals gradually over three releases: Ruby 3.4 (Now): Opt-in warnings when you enable deprecation warnings

Topics: frozen ruby string warning warnings

Shop Amazon

Brut: A New Web Framework for Ruby

news.ycombinator.com David Bryant Copeland 2026-02-02 05:03:20

Brut aims to be a simple, yet fully-featured web framework for Ruby. It's different than other Ruby web frameworks. Brut has no controllers, verbs, or resources. You build pages, forms, and single-action handlers. You write HTML, which is generated on the server. You can write all the JavaScript and CSS you want. Here’s a web page that tells you what time it is: class TimePage < AppPage def initialize ( clock :) @clock = clock end def page_template header do h1 { "Welcome to the Time Page!" }

Topics: brut make ruby want web

Shop Amazon

Ruby on Rails Audit Complete

news.ycombinator.com Unknown 2026-03-14 07:15:18

The Open Source Technology Improvement Fund is proud to share the results of our security audit of Ruby on Rails. Ruby on Rails (or “Rails”) is an open source full stack web-application framework. Thanks to the help of X41 D-Sec, GitLab, and the Sovereign Tech Agency, Rails can provide more secure versions of the tools needed for users to create database-backed web applications following the Model-View-Controller pattern. Audit Process: The audit work for this engagement took place over Decemb

Topics: audit project rails ruby security

Shop Amazon

Latest Tech News

How Ruby executes JIT code

Rv, a new kind of Ruby management tool

Do I not like Ruby anymore? (2024)

How RubyGems.org protects OSS infrastructure

Marshal madness: A brief history of Ruby deserialization exploits

Why we still build with Ruby in 2025

All-In on Omarchy at 37signals

60 malicious Ruby gems downloaded 275,000 times steal credentials

The /o in Ruby regex stands for "oh the humanity "

AI coding agents are removing programming language barriers

Ruby 3.4 frozen string literals: What Rails developers need to know

Brut: A New Web Framework for Ruby

Ruby on Rails Audit Complete

About GoKawiil

Privacy

Advertising

Latest Tech News

Trending Topics

Hot Now

Popular

Emerging

About GoKawiil

Privacy

Advertising