KKazem Mortazavi9h ago · 2 min readFrom Patch to Exploitation in Two Weeks: The GitLab Regex RCE Is Now Under AttackOn October 12, GitLab fixed a flaw rated a full CVSS 10, and at that point nobody had reported an attack. For many teams that reads as "we have time." Seventeen days later, the US Cybersecurity and Insecurityland.hashnode.dev
DDamiano Bianda1d ago · 6 min readGitLab Was Patched, the Server Was Still Vulnerable: CVE-2026-97229 Lives in RubyOn October 20, 2026, someone registered an account on Alpine Linux's public GitLab instance and started sending it crafted CI configurations. The instance crashed eight times over two days. Four of thdamianobianda.hashnode.dev
YYashika Vijayvargiya23h ago · 7 min readRails 8.1: Using only_columns to Control Which Database Columns Active Record UsesWhen working with legacy databases or large Rails applications, a model may have more database columns than the application actually needs. Some columns might belong to an older feature, a third-partyrailswithyashika.hashnode.dev
NNaveed Ahmed2d ago · 3 min readRuby Deserialization Security: Kubernetes Auditing & Production HardeningOriginally published on Naveed Ahmed's Engineering Blog. One overlooked data-processing decision can create a serious application security problem. In Ruby, object deserialization is a good example. Tnaveedkumbhar.hashnode.dev
WWaqas Shahid4d ago · 2 min readRuby Explained: The Language That Puts Developer Happiness FirstIntroduction Ruby was designed with one unusual priority: the happiness of the programmer. Its creator, Yukihiro Matsumoto, believed code should be a joy to read and write, and that philosophy shaped practicaldevblog.hashnode.dev
KKofi / Illestpreacha4d ago · 1 min readMathober2026_CrossedPrismGraphAudioTransversal For the 21st Sketch of Mathober2026, AudioTransversal coded in SonicPi does a Sonification of the Hamiltionian Path in a Crossed Prism Graph (Day 25 of Mathober 2026). Audio IllestPblog.illestpreacha.com
YYashika VijayvargiyaOct 22 · 6 min readWhen to Choose Optimistic vs. Pessimistic Locking in Ruby on RailsNot every concurrent database update needs the same locking strategy. Imagine two users trying to book the last available seat on a flight. Both see that the seat is available and click “Book” almost railswithyashika.hashnode.dev
KKofi / IllestpreachaOct 18 · 2 min readWCCC_FlockingFlockingToMegaBlob For this week's Creative Code Challenge by @sableraph: "Flocking”,FlockingToMegaBlob coded with LiveCodeLab & SonicPi uses the following definition of flocking to make an entity of blog.illestpreacha.com
SSina RezaeiOct 8 · 9 min readGetting to Know Yourself: Understanding self in Rubyself is one of those Ruby keywords that looks easy until you meet it in real code. You see it in a setter: self.name = normalized_name Then in a class method: def self.from_cents(...) Then somewheresinarezaei.hashnode.dev
MMuhammad Zain Ul AbidinSep 22 · 2 min readRails Has .second, .third, .fourth, .fifth… and Then .forty_twoOne of those tiny Rails details that reminds you this framework has always had a personality. If you’ve worked with Rails for a while, you’ve probably used positional helpers like first, second, or thzainbuilds.hashnode.dev
