TDD is dead. Long live testing. (DHH)
By David Heinemeier Hansson on April 23, 2014 Test-first fundamentalism is like abstinence-only sex ed: An unrealistic, ineffective morality campaign for self-loathing and shaming. It didn't start out like that. When I first discovered TDD, it was like a courteous invitation to a better world of writing software. A mind hack to get you going with the practice of testing where no testing had happen
ScaleOut | Supership
2024å¹´4月1日よりã€Supershipæ ªå¼ä¼šç¤¾ã¯è¦ªä¼šç¤¾ã§ã‚ã‚‹Supershipãƒ›ãƒ¼ãƒ«ãƒ‡ã‚£ãƒ³ã‚°ã‚¹æ ªå¼ä¼šç¤¾ã«å¸åŽåˆä½µã•ã‚Œã¾ã—ãŸã€‚ åˆä½µã«ä¼´ã„ã€å˜ç¶šä¼šç¤¾ã§ã‚ã‚‹Supershipホールディングスã¯ç¤¾åã‚’Supershipã«å¤‰æ›´ã—ã€æ–°ãŸãªçµŒå–¶ä½“制を発足ã—ã¾ã—ãŸã€‚本件ã«é–¢ã™ã‚‹è©³ç´°ã¯ã€ãƒ—レスリリースをã”確èªãã ã•ã„。 2024å¹´4月1日よりã€Supershipæ ªå¼ä¼šç¤¾ã¯è¦ªä¼šç¤¾ã§ã‚ã‚‹Supershipãƒ›ãƒ¼ãƒ«ãƒ‡ã‚£ãƒ³ã‚°ã‚¹æ ªå¼ä¼šç¤¾ã«å¸åŽåˆä½µã•ã‚Œã¾ã—ãŸã€‚ åˆä½µã«ä¼´ã„ã€å˜ç¶šä¼šç¤¾ã§ã‚ã‚‹Supershipホールディングスã¯ç¤¾åã‚’Supershipã«å¤‰æ›´ã—ã€æ–°ãŸãªçµŒå–¶ä½“制を発足ã—ã¾ã—ãŸã€‚ 本件ã«é–¢ã™ã‚‹è©³ç´°ã¯ã€ãƒ—レスリリースをã”確èªãã ã•ã„。
Rails 4.0.4ã‚’4.1.0ã«ã‚¢ãƒƒãƒ—グレードã—ãŸ
Rails 4.1.0ãŒå‡ºã¦ã„ãŸã®ã§ã€ã“ã®ãƒ–ãƒã‚°ã‚’アップグレードã—ã¦ã¿ã¾ã—ãŸã€‚ 例ã«ã‚ˆã£ã¦ã€ä½œæ¥ãƒã‚°ã‚’残ã—ã¦ãŠãã¾ã™ã€‚ Riding Rails: Rails 4.1.0: Spring, Variants, Enums, Mailer previews, secrets.yml http://weblog.rubyonrails.org/2014/4/8/Rails-4-1/ (1) Gemfileã®Railsã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’4.1.0ã«ã™ã‚‹ (2) 以下ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’実施。 {{{code bundle update rake rails:update }}} -config/routes.rbã¯ã‚¹ã‚ップ -config/application.rbã¯ç‰¹ã«å¤‰åŒ–ãŒç„¡ã‹ã£ãŸã®ã§ã‚¹ã‚ップ --（備忘録：4.0.2ã‹ã‚‰4.0.4ã«ã‚¢ãƒƒãƒ—グレードã—ãŸæ™‚ã¯å°‘ã—変化ãŒã‚ã£ãŸã®ã§ä¿®æ£ã—ãŸè¨˜æ†¶ãŒã‚ã‚Šã¾ã™ï¼‰
ScaleOut | Supership
2024å¹´4月1日よりã€Supershipæ ªå¼ä¼šç¤¾ã¯è¦ªä¼šç¤¾ã§ã‚ã‚‹Supershipãƒ›ãƒ¼ãƒ«ãƒ‡ã‚£ãƒ³ã‚°ã‚¹æ ªå¼ä¼šç¤¾ã«å¸åŽåˆä½µã•ã‚Œã¾ã—ãŸã€‚ åˆä½µã«ä¼´ã„ã€å˜ç¶šä¼šç¤¾ã§ã‚ã‚‹Supershipホールディングスã¯ç¤¾åã‚’Supershipã«å¤‰æ›´ã—ã€æ–°ãŸãªçµŒå–¶ä½“制を発足ã—ã¾ã—ãŸã€‚本件ã«é–¢ã™ã‚‹è©³ç´°ã¯ã€ãƒ—レスリリースをã”確èªãã ã•ã„。 2024å¹´4月1日よりã€Supershipæ ªå¼ä¼šç¤¾ã¯è¦ªä¼šç¤¾ã§ã‚ã‚‹Supershipãƒ›ãƒ¼ãƒ«ãƒ‡ã‚£ãƒ³ã‚°ã‚¹æ ªå¼ä¼šç¤¾ã«å¸åŽåˆä½µã•ã‚Œã¾ã—ãŸã€‚ åˆä½µã«ä¼´ã„ã€å˜ç¶šä¼šç¤¾ã§ã‚ã‚‹Supershipホールディングスã¯ç¤¾åã‚’Supershipã«å¤‰æ›´ã—ã€æ–°ãŸãªçµŒå–¶ä½“制を発足ã—ã¾ã—ãŸã€‚ 本件ã«é–¢ã™ã‚‹è©³ç´°ã¯ã€ãƒ—レスリリースをã”確èªãã ã•ã„。
Railsãªãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã§åˆ©ç”¨ã—ã¦ã„る便利ãªGem一覧 | Webシステム開発ï¼æ•™è‚²ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚¿ã‚¤ãƒ インターメディア
Rubyã«ã¯Gemã¨å‘¼ã°ã‚Œã‚‹ã‚µãƒ¼ãƒ‰ãƒ‘ーティã®ãƒ©ã‚¤ãƒ–ラリãŒè±Šå¯Œã«å˜åœ¨ã—ã¾ã™ã€‚ Gemã¯å¤§å¤‰ä¾¿åˆ©ãªã‚‚ã®ã§ã€ã“ã†ã„ã†æ©Ÿèƒ½ã»ã—ã„ãªã¨æ€ã£ãŸéš›ã« The Ruby Toolbox ã‚„ RubyGems.org ã‚„ Google ã§æ¤œç´¢ã™ã‚‹ã¨å¤§æŠµèª°ã‹ãŒãã®æ©Ÿèƒ½ã‚’æŒã£ãŸGemを作ã£ã¦ã„ãŸã‚Šã—ã¾ã™ã€‚ gemを利用ã™ã‚‹ã®ã‚‚ã€RubyGems.orgã«ç™»éŒ²ã•ã‚Œã¦ã„ã‚‹ã‚‚ã®ãªã‚‰ã° ã¨å…¥åŠ›ã™ã‚‹ã“ã¨ã§åˆ©ç”¨å¯èƒ½ã¨ãªã‚Šã¾ã™ã€‚ Gemã¯ã ã‚Œã§ã‚‚ç°¡å˜ã«é–‹ç™ºã§ãã€å¯©æŸ»ç„¡ã—ã§ã™ãã«å…¬é–‹ã§ãã‚‹ãŸã‚ã€æ—¥ã€…大é‡ã®GemãŸã¡ãŒRubyGems.orgã«ç™»éŒ²ã•ã‚Œã¦ã„ã¾ã™ã€‚åé¢ã€é•·å¹´ä¿å®ˆã•ã‚Œã¦ã„ãªã„Gemã‚„å“質ã®ä½Žã„Gemも大é‡ã«RubyGems.orgã«ç™»éŒ²ã•ã‚Œã¦ã„ã‚‹ã®ãŒç¾çŠ¶ã§ã™ã€‚ åŒã˜æ©Ÿèƒ½ã‚’æŒã£ãŸGemも大é‡ã«ç™»éŒ²ã•ã‚Œã¦ã„ãŸã‚Šã—ã¦ã€ã©ã®ãƒ©ã‚¤ãƒ–ラリを利用ã—ã¦ã‚ˆã„ã®ã‹è¿·ã†äº‹ã‚‚多々ã‚ã‚Šã¾ã™ã€‚ 今回ã¯å¼Šç¤¾ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã§å®Ÿéš›ã«åˆ©ç”¨ã—ã¦ã„ã‚‹ã€ä¾¿åˆ©ãª
Ruby On Rails State of Practice Results
Scaling Challenges: Productivity, Cost Efficiency, and Microservice Management The main objective of this article is to delve into the technical complexities and strategic adjustments undertaken by Trainline. By examining challenges such as managing peak transaction volumes and orchestrating microservice architectures, we aim to uncover the valuable lessons learned and insights gained from Trainli
入門Chef-Soloを片手ã«Railsアプリを動作ã•ã›ã‚‹ã¨ã“ã‚ã¾ã§ã‚„ã£ã¦ã¿ãŸ - プãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ãƒŽãƒ¼ãƒˆ
Chefã«ã¤ã„ã¦ã¯å‰ã€…ã‹ã‚‰æ°—ã«ã¯ãªã£ã¦ã„ãŸã‘ã©ã¾ã¨ã¾ã£ãŸæƒ…å ±ãŒã‚ã¾ã‚Šãªãã€ä¸ã€…ã˜ã£ãã‚Šã¨å–り組ã‚ã¦ã„ãªã‹ã£ãŸã®ã§ã™ãŒã€ã¡ã‚‡ã†ã©æ¬¡ã®ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã‹ã‚‰å°Žå…¥ã—よã†ã¨ã—ã¦ã„ãŸã¨ã“ã‚ã«ã€ã€Žå…¥é–€Chef Solo - Infrastructure as Codeã€ã¨ã„ã†ã‚ã‚ŠãŒãŸã„ã¾ã¨ã‚本ãŒå‡ºç‰ˆã•ã‚ŒãŸã®ã§ã€ãれを片手ã«è‰²ã€…ã¨å®Ÿé¨“ã—ã¦ã¿ã¾ã—ãŸã€‚ 入門Chef Soloã¯ã‚ˆãã¾ã¨ã‚られã¦ã„ã¦éžå¸¸ã«åŠ©ã‹ã£ãŸã®ã§ã™ãŒã€Kindleã§è¦‹ã‚‹ã¨ç›®æ¬¡ãŒãªãã¦é€†å¼•ãçš„ã«åˆ©ç”¨ã—ãªãŒã‚‰æ§‹ç¯‰ã™ã‚‹ã®ãŒçµæ§‹å¤§å¤‰ã§ã—ãŸã®ã§ã€è‡ªåˆ†ç”¨ã«æ‰‹é †æ›¸ã¨ã—ã¦ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚（目次ã«é–¢ã—ã¦ã¯ç¾åœ¨ä¿®æ£ç‰ˆãŒå‡ºã¦ã„るよã†ã§ã™ï¼‰ ã¨ã‚Šã‚ãˆãšRailsã®ã‚µãƒ¼ãƒ“ス開発プãƒã‚¸ã‚§ã‚¯ãƒˆã§ä½¿ã„ãŸã„ã®ã§ã€ä»¥å‰ã«ã•ãらVPSã®è¨å®šã§è¡Œã£ãŸã‚ˆã†ãªæ„Ÿã˜ã§rvm, nginx, unicorn, mysqlã§RailsアプリãŒå‹•ãã¨ã“ã‚ã¾ã§ã‚„ã£ã¦ã¿ã¾ã—ãŸã€‚ã‚‚ã†1年以上å‰ã§ã™ãŒ
Rails SQL Injection Examples
Overview The Ruby on Rails web framework provides a library called ActiveRecord which provides an abstraction for accessing databases. This page lists many query methods and options in ActiveRecord which do not sanitize raw SQL arguments and are not intended to be called with unsafe user input. Careless use of these methods can open up code to SQL Injection exploits. The examples here do not inclu
Blog
What We Know Our key takeaways from partnering with enterprise-level engineering teams. Details How We Ensure Success Our unique and personalized approach to help you achieve your business goals. Details Your SEI Platform Get to know your custom-designed Software Engineering Intelligence (SEI) platform. Details
RubyGems in recovery mode after site hack
Volunteers at  RubyGems.org are scrambling to recover the software repository after it was compromised yesterday. An unknown user uploaded a malicious code package to RubyGems that executed on its server, threatening the integrity of hundreds of thousands of sites that use software from the site. RubyGems is the software package repository for Ruby programming language applications, including the
Ruby on Rails ã® Action Pack ã®ãƒ‘ラメータ解æžã®è„†å¼±æ€§ã«ã‚ˆã‚Šä»»æ„ã®Rubyコードを実行ã•ã‚Œã‚‹è„†å¼±æ€§ï¼ˆCVE-2013-0156）ã«é–¢ã™ã‚‹æ¤œè¨¼ãƒ¬ãƒãƒ¼ãƒˆ
Ruby on Rails ã® Action Pack ã®ãƒ‘ラメータ解æžã®è„†å¼±æ€§ã«ã‚ˆã‚Šä»»æ„ã®Rubyコードを実行ã•ã‚Œã‚‹è„†å¼±æ€§ï¼ˆCVE-2013-0156）ã«é–¢ã™ã‚‹æ¤œè¨¼ãƒ¬ãƒãƒ¼ãƒˆ Tweet 2013/01/24 NTTãƒ‡ãƒ¼ã‚¿å…ˆç«¯æŠ€è¡“æ ªå¼ä¼šç¤¾ è¾» 伸弘 å°æ¾ 徹也 ã€æ¦‚è¦ã€‘ Ruby on Railsã«ã€ãƒªãƒ¢ãƒ¼ãƒˆã‚ˆã‚Šä»»æ„ã®ã‚³ãƒ¼ãƒˆã‚™ã‚’実行ã•ã‚Œã‚‹è„†å¼±æ€§ã‹ã‚™ç™ºè¦‹ã•ã‚Œã¾ã—ãŸã€‚ ã“ã®è„†å¼±æ€§ã¯ã€ãƒ‘ラメータ解æžã«ãŠã‘ã‚‹YAMLãŠã‚ˆã³ã‚·ãƒ³ãƒœãƒ«å¤‰æ›ã®ä¸å‚™ã«èµ·å› ã—ã¾ã™ã€‚ã“ã®è„†å¼±æ€§ã‚’悪用ã—ã¦ã€æ”»æ’ƒè€…ã¯ã‚¿ãƒ¼ã‚²ãƒƒãƒˆãƒ›ã‚¹ãƒˆä¸Šã«ã¦ã€å¥ªå–ã—ãŸãƒ¦ãƒ¼ã‚¶æ¨©é™ã§ä»»æ„ã®Rubyコードã®å®Ÿè¡ŒãŒå¯èƒ½ã§ã™ã€‚ 今回ã€ã“ã®Ruby on Railsã®Action Packã®ãƒ‘ラメータ解æžã®è„†å¼±æ€§ã«ã‚ˆã‚Šã€ä»»æ„ã®Rubyコードを実行ã•ã‚Œã‚‹è„†å¼±æ€§ï¼ˆCVE-2013-0156）ã®å†ç¾æ€§ã«ã¤ã„ã¦æ¤œè¨¼ã‚’è¡Œã„ã¾ã—ãŸã€‚ 検証環境ã«ã¯ã€HTTPリクエストを処ç†ã™
Exploiting Ruby on Rails with Metasploit | Rapid7 Blog
Last updated at Sat, 20 Jan 2024 23:18:40 GMT BackgroundEarlier this week, a critical security flaw in Ruby on Rails (RoR) was identified that could expose an application to remote code execution, SQL injection, and denial of service attacks. Ruby on Rails is a popular web application framework that is used by both web sites and web-enabled products and this flaw is by far the worst security probl
[SEC][ANN] Rails 3.2.11, 3.1.10, 3.0.19, and 2.3.15 have been released!
[SEC][ANN] Rails 3.2.11, 3.1.10, 3.0.19, and 2.3.15 have been released! Hi everybody. I’d like to announce that 3.2.11, 3.1.10, 3.0.19, and 2.3.15 have been released. These releases contain two extremely critical security fixes so please update IMMEDIATELY. You can read about the security fixes by following these links: CVE-2013-0155 CVE-2013-0156 In order to ease upgrading, the only major changes
![[SEC][ANN] Rails 3.2.11, 3.1.10, 3.0.19, and 2.3.15 have been released!](https://cdn-ak-scissors.b.st-hatena.com/image/square/5dbf8d4bb6aeb72c4906093e54727da9571cbd97/height=288;version=1;width=512/https%3A%2F%2Frubyonrails.org%2Fassets%2Fimages%2Fopengraph.png)
ã€è¨‚æ£ã€‘Railsã§connectionæ•°ã‚’ç ´ç¶»ã•ã›ãšã«establish_connectionã§åˆ¥DBを利用ã™ã‚‹ - 車輪ã®å†ç™ºæ˜Ž
å‰ã®ã‚¨ãƒ³ãƒˆãƒªï¼ˆhttp://d.hatena.ne.jp/raugisu/20120428/1335598633）ã§ã€ActiveRecord ã§åˆ¥DBã«æŽ¥ç¶šã™ã‚‹ãŸã‚ã« establish_connection を安易ã«ä½¿ã†ã“ã¨ã§ç™ºç”Ÿã™ã‚‹åœ°ç„ã«ã¤ã„ã¦æ›¸ã„ãŸã€‚ ã‚“ã§ã€ãã®åœ°ç„ã¸ã®å¯¾ç–ã¨ã—ã¦æŒ™ã’ãŸã‚‚ã®ã®ãªã‹ã§ã€ä¸€ç•ªè‰¯ã„ã¨æ€ã‚れるã€ã€Œåˆ¥DBã¸ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ãƒ—ールを引ãå—ã‘るクラスを作ã£ã¦ç¶™æ‰¿ã™ã‚‹ã€æ–¹æ³•ã‚’試ã—ã¦ã¿ãŸã€‚ ã¶ã£ã¡ã‚ƒã‘ã€å…ƒãƒã‚¿ï¼ˆhttp://d.hatena.ne.jp/rudeboyjet/20101221/p1 ）ã®ã»ã†ãŒã‚ãƒãƒ³ã¨ã—ã¦ã‚‹ã®ã§ã€ãã£ã¡è¦‹ãŸæ–¹ãŒå‚考ã«ãªã‚‹ã€‚ （2012/5/8ã€ã‚³ãƒ¡ãƒ³ãƒˆæ¬„ã§ã€Œself.abstract_class = trueã€ã®è¨å®šã®æŒ‡æ‘˜ã‚’ã„ãŸã ã„ãŸã®ã§è¨‚æ£ã—ã¾ã—ãŸã€‚ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸï¼ï¼‰ （2012/5/29ã€è¨‚æ£éƒ¨åˆ†ã€æ‰“ã¡æ¶ˆã—ç·šã§è¨‚æ£ã¨ã‹ã—ã¦ãŸã‚“
Ruby on Railsã®find_by_*メソッドã«SQLインジェクション脆弱性(CVE-2012-5664) | 徳丸浩ã®æ—¥è¨˜
Ruby on Rails(3.2.9, 3.1.8, 3.0.17以å‰)ã®find_by_*メソッドã«SQLインジェクション脆弱性ãŒè¦‹ã¤ã‹ã‚Šã¾ã—ãŸ(CVE-2012-5664)。ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ãã®æ¦‚è¦ã¨å¯¾ç–ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ æ¦‚è¦ Ruby on Railsã®find_by_*メソッドã®å¼•æ•°ã¨ã—ã¦ãƒãƒƒã‚·ãƒ¥ã‚’指定ã™ã‚‹ã“ã¨ã§ã€ä»»æ„ã®SELECT文を実行ã§ãる脆弱性ãŒã‚ã‚Šã¾ã™ã€‚ 検証 Ruby on Rails3.2.9ã®ç’°å¢ƒã‚’用æ„ã—ã¦ã€ä»¥ä¸‹ã®2ã¤ã®ãƒ¢ãƒ‡ãƒ«ã‚’用æ„ã—ã¾ã—ãŸã€‚ $ rails g scaffold user name:string email:string $ rails g scaffold book author:string title:string モデルUserã¯å€‹äººæƒ…å ±ã‚’ä¿æŒã—ã¦ãŠã‚Šã€è‡ªåˆ†è‡ªèº«ã®æƒ…å ±ã®ã¿ãŒé–²è¦§ã§ãã‚‹ã¨ã„ã†æƒ³å®šã§ã™ã€‚モデルBookã¯æ›¸èªŒãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã§ã‚
Railsã§ä»Šã„るブランãƒã«ã‚ˆã£ã¦ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‚’切り替ãˆã‚‹ - ( ꒪⌓꒪) ゆるよã‚日記
ブランãƒãƒ³ã‚°ãƒ¢ãƒ‡ãƒ«ã¨ã—ã¦git-flowを使ã£ã¦ã„ã¦ã€ãƒ¡ã‚¤ãƒ³ãƒ©ã‚¤ãƒ³ã¨ã—ã¦ã€æœ¬ç•ªé©ç”¨ä¸ã®masterブランãƒã¨ã€æ¬¡æœŸãƒªãƒªãƒ¼ã‚¹ç”¨ã®release/9999ブランãƒã¨ã€ãƒ¡ã‚¤ãƒ³é–‹ç™ºãƒ–ランãƒã®developãŒã‚る。 ã¨ã“ã‚ãŒã€é–‹ç™ºä¸ã¯é »ç¹ã«ãƒ–ランãƒã‚’移動ã™ã‚‹ã—ã€ãƒ–ランãƒã«ã‚ˆã£ã¦DBã®ã‚¹ã‚ーマãŒç•°ãªã‚‹ãªã‚“ã¦ã‚¶ãƒ©ã«ã‚ã‚‹ã—ã€ãƒ–ランãƒåˆ‡ã‚Šæ›¿ãˆã‚‹åº¦ã«config/database.ymlを書ãæ›ãˆã‚‹ã®ã‚‚タルã„ã®ã§ã€ã“ã‚“ãªé¢¨ã«æ›¸ã„ãŸã€‚ development: adapter: postgresql database: my_app_<%= case `git symbolic-ref --short HEAD` when 'master' then 'master' when 'develop' then 'develop' when /release\/.*/ then 'release' when /ho
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
HeadJS: A Quick Review | factor[e] design initiative
GENDOSU@NET
银河7163官网-欢迎您
Serialization Mischief in Ruby Land (CVE-2013-0156) | Rapid7 Blog
{{#tags}}- {{label}}
{{/tags}}