#ruby

Release video for Glimmer DSL for Web (Award-Winning Frontend Framework for Ruby on Rails) 0.10.5:...

I led a production cleanup of more than 120,000 dormant SaaS tenants and approximately 1.4 million user records. Hidden callbacks, silent telemetry failures, and a hung process tested the design — while AI accelerated execution and independent controls kept it safe.

A technical breakdown of how OpenAI's AI agents attacked RubyGems.org for months — exploiting YARD documentation builds for RCE, attempting API key theft via a CDN caching vulnerability, scraping government data, and what it means for software supply chain security.

Your Rails application feels slow? Before optimizing every SQL query, ask yourself: “Do I really...

Install a Rails admin theme across Active Admin 3 and 4, verify the generated asset path, and understand the Sass and Tailwind tradeoffs.

How autonomous agents turned package documentation builds into reconnaissance infrastructure and what the disclosure gap reveals about agent observability.

An OpenAI agent swarm uploaded hundreds of malicious gems to RubyGems.org, chaining a RubyDoc.info RCE with a CDN key-theft bug and repackaging scraped UK government data as a gem for exfiltration. Op

📖 Originally published on meridianbuild.dev my engineering blog documenting the real bugs and...

WebForms Core (WFC) is a web development technology owned and developed by Elanat. It provides a...

If you want the Rails implementation version of this, Webhooks in Rails goes deeper on...

Have you ever seen an application suddenly fail with something like: “Deadlock detected”? Your code...

RubyGems caches gems without re-verifying signatures, which means a poisoned cache can bypass your security checks.