11/
Cierre:
Así como tratás las dependencias como código propio,
tratá también los sistemas externos igual.
Porque cuando algo se rompe,
igual sos vos el responsable.
1/
Ayer di una lightning talk en la meetup de RubySur (https://t.co/RRiUa5g7wR).
Historia corta: terminamos debugueando un bug de altas duplicadas que cruzaba 3 sistemas: billetera, nuestra app y autopistas.
Nadie encontraba el problema.
TIL wrapping a command in () runs it in a subshell (a child process).
$ x=1
$ (echo $x)
1
$ (y="hola")
$ echo $y
🦗🦗🦗
Learned this while running many:
(dotenv -f .env.<destination> -- kamal deploy -d <destination>)
so env vars don’t leak into my shell.
Pretty sure a client audited an app I maintain last night.
Saw some null byte injection attempts in Sentry.
I am pretty sure modern Ruby (& Rails) is basically immune. Still added some sanitizing middleware.
The fix is already in prod.
Still waiting for the audit report.
I got so used to CLI coding agents that IDEs like Cursor or VSCode felt like an overkill. Too slow to just check something or change a comma.
I googled “neovim for normies”. We’ll see how it goes.
I would like to have a agent (or skill or whatever) that analyzes git logs and tells me how many dependencies I added and how many I removed.
That net negative number is all I need to know how good the year was.