123
 123

Wed 22 October, 2008

Click here to bookmark this link.Channel Image18:52 Just think of the tragedy o...» Projectionist
Just think of the tragedy of teaching children not to doubt.

Clarence Darrow


add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image02:16 restful_authentication with state machine» Suave's Blog
一直使用 restful_authentication 作用户认证,最近它加上的状态机功能(用了 acts_as_state_machine),装上以后遇到灵异事件,系统发出的激活邮件里面的激活码和数据库里面存的不一样。我并不了解 ...
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl

Tue 21 October, 2008

Click here to bookmark this link.Channel Image08:45 帰国» 青木日記
先々週土曜から先週土曜までラスベガスへ出張だった。 帰ってきて、最後の力で荷物ほどいて寝て、 起きたときはもう日曜が終わりかけていた。 どんだけ疲れてんだ俺……。 木金は休むかなあ。 (06:51)
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image00:23 Online Training Course for FXRuby, YAML and ActiveRecord» Lovable Lyle
Ruby Learning has just announced the availability of an online training course for building GUI applications in Ruby, using FXRuby: You kept asking for it and so here it is - the new short, intensive, online course that helps you create UI’s using FXRuby and with YAML and ActiveRecord (with Migrations) helps you access a database. According [...]
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl

Mon 20 October, 2008

Click here to bookmark this link.Channel Image21:58 南京三日游» 梦想风暴
大学期间最好的一个兄弟结婚了,于是,我有机会到南京游玩三日。

关于游

我这个兄弟说,南京旅游,除了明朝那点事儿,就是爱国主义教育了。

我随身带了本《万历十五年》,对于寻访明朝踪迹,就没有那么浓厚的兴趣了,于是,游就成了彻底的爱国主义教育。去了中山陵,到了雨花台,几乎是游览中国近代史。我对历史有兴趣,但唯独不喜欢中国近代史,毕竟,好事让人心里舒坦。

跟近代关联不大的是,夫子庙。旧时秦淮人家,歌舞升平的景象,伴随着如今熙熙攘攘的人流。

关于吃

好吧!我承认,我喜欢吃。在南京,我吃过饭店,吃过普通人家,也吃过小吃,不同特色。

我对小吃情有独钟,无论走到哪里,我都喜欢找当地的小吃,这就是我喜欢西安的一个原因。南京给我留下印象的是,鸭血粉丝汤、盐水鸭和梅花糕。小吃遍地都是,但自己肚子有限,想找到最好吃的,通常需要本地人的陪伴,像这次为了吃梅花糕,也经历穿街游巷的过程。

关于算命

我不大信那些算命的,但是,这次到南京,居然算了两次。

一次在灵谷寺的貔貅殿,一次在玄武湖边。当然,无论是大师,还是仙姑,目的都是尽人皆知的。不过,偶尔听他们说一些,也很有意思,尤其是彼此素不相识,却说出了自己的很多情况,给了自己一些建议,有趣!

关于书店

这次去南京,目的之一,还有找一本书,虽然败兴而归,却逛了三处书店,对于如我一般的书虫,也算是一种补偿吧!

南京大学边上的先锋书店,给人一种属于读书人的感觉;军人俱乐部里面的淘书场,让人体会到是实惠;凤凰国际书城,时尚。

关于民俗

这次去的目的,参加婚礼。

第一次,参加家乡之外的婚礼,有些不同。比如,家里那边都是早上结婚,而南京这边居然是晚上。相同的是,一样的喜庆、一样的热闹。

关于行

公交车、地铁、出租车、步行、火车,差不多了吧!

运气比较不错,大多数坐车的时候,都能遇到座位。南京的公交站点很有趣,据说,叫同一个名字的站,最多会相距三站的距离。南京的地铁买票时,需要选择站点,大概是按站计费吧!那个地铁票让我想起电影中赌博的筹码。南京西站破旧的能够去拍老电影,而南京站豪华得让我差点对出租司机说,我要去的是火车站,不是飞机场。

关于印象

我并没有感到任何特别。如果说特别,可能是它没有我想象那么繁华,毕竟,江苏是一个经济强省。

在南京,还可以看到城墙,所以,给我的感觉,有些像西安,可能也正是因为这种感觉,让我并没有感觉特别,甚至有一丝亲切。兄弟家住的是一个老房子,所以,我有机会在那个平凡得不能在平凡的街区中穿行,从一个个普通得不能在普通住家门前经过,这种普通的感觉,在那一丝亲切上又增加了几分。

关于节俭

这是一个与城市无关的话题。兄弟和他老婆,都很懂得节俭,和他们在一起,经常挺他们说,别买这个了,等打折的时候再买吧!

他们的这种节俭甚至用到了我的身上,光在回程的火车票一项上,就为我省了180块钱:省下卧铺,“坐”了一夜火车。正是因为如此,此时此刻,我已经很累,就到这里了!:)


add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image21:19 Rails Rumble 2008 applications» Riding Rails - home

Want to have a look at the entries for this year’s Rails Rumble? Take a look at this list of applications that were submitted and then ordered according to category. Good stuff.


add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image21:19 Paris on Rails: December 1st» Riding Rails - home

Paris on Rails is having it’s third annual conference on December 1st. There’s a wealth of great speakers lined up and yours truly will be doing a video iChat session as well. If you register before November 9th, the entrance fee is just 80 euros. If you can, go!


add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image17:35 I want to give my kids just...» Projectionist
I want to give my kids just enough so that they would feel that they could do anything, but not so much that they would feel like doing nothing.

Warren Buffett


add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image09:05 Rails 2.0.5: Security fixes» Riding Rails - home

Time for another small security fix for Rails 2.0.x. The 2.0.5 release contains just two changes: A backport of the offset/limit sanitization fix for Active Record and a fix against header-injection when using user-contributed strings in redirect_to (see Response Splitting for more information).

As always, you can install with:
gem install rails --version 2.0.5


add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image06:02 This – Brian Eno» Projectionist
Click here to bookmark this link.Channel Image02:11 Response Splitting Risk» Riding Rails - home

The Ruby HTTP libraries used by Rails do not perform any santization of the values of their HTTP Headers. This can lead to Response Splitting and Header Injection attacks in certain circumstances where user-provided values are written into response headers. These malformed values can be used to set custom cookies, and forge fake responses to users if your application uses any of the user submitted parameters to construct HTTP headers without sanitizing.

A common scenario where this can be exploited is where your application takes a URL from the query string, and redirects the user to it. To mitigate this common scenario new versions of Rails will be released which sanitize the values passed to redirect_to. However you will still need to take care when writing other values to response headers.

The new versions which will contain the fixes are:

  • 2.0.5
  • 2.1.2
  • 2.2.0

These releases are not available immediately, so in the event that it’s infeasible or inconvenient for your application to sanitize the user-supplied values it passes to redirect_to, patches are available at the following locations.

Users of Edge Rails prior to ba80ff74a962 should update to the latest revisions, cherry pick the change at ba80ff74a962 or or apply this patch

Thanks to Luka Treiber and Mitja Kolsek of ACROS Security for notifying us of this issue and the Ruby Security team for their advice.


add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image02:11 Groovy Sql Closure Examples» Joey Gibson's Blog
My post about closures last week generated quite a bit of traffic and comments, both positive and negative. I decided to followup on that post with a few examples of how to add a method that I believe is missing from Groovy’s Sql class that will execute a closure, and will guarantee that the connection gets closed, [...]
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image00:06 All frisks that avoid the s...» Projectionist
All frisks that avoid the sensitive regions are by definition symbolic.

Jeffrey Goldberg


add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl

Sun 19 October, 2008

Click here to bookmark this link.Channel Image21:39 Ruby ecosystem in China» Suave's Blog
今天参加 QClub 听财帮子的 RobinLu 和 FreeWheel 的董斌分享 Rails 的一些开发经验,去的有很多熟脸。 回想 Rails 从传入国内三年多的时间,感觉一直是只叫好不叫座,这其中有几个问题可能是影响...
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image21:00 upgrade auto_migration to rails edge» Suave's Blog
Rails 升级到 edge 以后出了自己的代码要重构,很多 plugins 也会出问题,今天就碰上一个: auto_migration,问题发现是 rake db:auto:migrate 之后出错提示 schema_info_table_name 是 undefined method,问题定位在auto...
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image15:10 Why are we still 'releasing' software?» O'Reilly News:Ruby
We've come a long way with tools for developing and sharing our code, especially when it comes to revision control. However, packaging and deploying code for release is still at worst a huge hassle and at best an administrative chore. Can we do better?
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image15:10 The Present and Future of Ruby and Rails» O'Reilly News:Ruby
Chad Fowler and Rich Kilmer discuss where Ruby and Rails have gone in the past year, whether RESTful composition obviates the need for ORM, what's interesting in the upcoming world of Ruby and Rails, and how Maglev, Rubinius, and other new Ruby implementations contribute to the world of dynamic languages.
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image15:10 The Present and Future of Ruby and Rails» O'Reilly News:Ruby
Chad Fowler and Rich Kilmer discuss where Ruby and Rails have gone in the past year, whether RESTful composition obviates the need for ORM, what's interesting in the upcoming world of Ruby and Rails, and how Maglev, Rubinius, and other new Ruby implementations contribute to the world of dynamic languages.
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image15:10 Testing Rails Partials» O'Reilly News:Ruby
Test Driven Development works best when each test case targets one aspect of a class's interface. So this post will demonstrate a simple and direct way to test a partial without testing the Views, layouts, and Controller actions surrounding it. On very complex projects, this technique keeps your partials decoupled.
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image15:10 Testing Rails Partials» O'Reilly News:Ruby
Test Driven Development works best when each test case targets one aspect of a class's interface. So this post will demonstrate a simple and direct way to test a partial without testing the Views, layouts, and Controller actions surrounding it. On very complex projects, this technique keeps your partials decoupled.
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image15:10 RubyCocoa and NSTables De-Mystified» O'Reilly News:Ruby
Screencast showing how to create a RubyCocoa application which pulls search results from Amazon using their Web API and populates a table.
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image15:10 Jason Fried of 37Signals on Business, Focus, and Avoiding Interruption» O'Reilly News:Ruby
Jason Fried discusses the day to day operations of 37signals and some of his ideas for minimizing distraction in the workplace. Fried talks about his view that startups should focus on profit and product before accepting venture capital. In this video, Fried's focus on the fundamentals of product design suggest an austerity and simplicity uncommon in an industry suffering from a pandemic of hype.
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image15:10 Jason Fried of 37Signals on Business, Focus, and Avoiding Interruption» O'Reilly News:Ruby
Jason Fried discusses the day to day operations of 37signals and some of his ideas for minimizing distraction in the workplace. Fried talks about his view that startups should focus on profit and product before accepting venture capital. In this video, Fried's focus on the fundamentals of product design suggest an austerity and simplicity uncommon in an industry suffering from a pandemic of hype.
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image15:10 Interview with David Heinemeier Hansson: Rails Culture, Scaling Basecamp, and Building Successful Companies» O'Reilly News:Ruby
In this video interview, DHH discusses the current state of Ruby on Rails adoption. Who is using Rails? How was the culture changed over the past five years? Hansson also comments on the technologies that are catching his attention and how they might affect Rails in the months to come. Hansson also comments on his Startup School presentation, and why he thinks Chicago is an ideal environment for technology and innovation.
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image15:10 Interview with David Heinemeier Hansson: Rails Culture, Scaling Basecamp, and Building Successful Companies» O'Reilly News:Ruby
In this video interview, DHH discusses the current state of Ruby on Rails adoption. Who is using Rails? How was the culture changed over the past five years? Hansson also comments on the technologies that are catching his attention and how they might affect Rails in the months to come. Hansson also comments on his Startup School presentation, and why he thinks Chicago is an ideal environment for technology and innovation.
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image08:57 Desert Code Camp in December» James Britt - Code, Content, Caffiene

At the Tempe Nerds lunch the other day we were speculating about there being another Desert Code Camp any time soon. I hadn’t heard anything, but today, out of curiosity, I checked the Web site, and right at top it says, “Next camp is coming December 6th, 2008”

Hopefully, more info will be available soon.


add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image01:47 上京» Matzにっき
また東京だ。朝、一番の飛行機で東京へ。 お昼は水道橋で日経BPの人と打ち合わせ。 ET2008参加について。 基本的にはオープンソースとかそういう話をするらしい。
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image01:47 IPA» Matzにっき
その後、秋葉原によってからIPAへ。 OSS貢献者賞の選考委員会。 毎年のことだが大変悩む。 なんかビジネス的な貢献度みたいなのも評価軸に入ってるし(その辺がOSSらしい?)、 純粋に開発者だけを評価するのではないというのがポリシーみたい。 これも毎年のことだが心情的に4人には絞りきれなくて、 次点という形で残すしかなかった。最初の候補のうち辞退者が出れば 次点に回るんだけど(これは公開されない)。 追記 発表があった。
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl

Sat 18 October, 2008

Fri 17 October, 2008

Click here to bookmark this link.Channel Image21:17 freeze RedCloth into vendor/» Suave's Blog
昨天 1KG.org 突然不能访问,询问服务商,原来他们升级了 RedCloth,之前就遇到过类似的问题,RedCloth 4.0.1 和 3.0.4 不兼容,当时我只是在 environment.rb 中指定了 require 的版本: require ‘rubygems...
add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image14:14 Ripples – Jim Henson» Projectionist
Click here to bookmark this link.Channel Image14:14 Greatest weakness? It’...» Projectionist
Greatest weakness? It’s possible that I’m a little too awesome.

Barack Obama


add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image01:29 Four years ago ...» James Britt - Code, Content, Caffiene

RubyConf2008 is less than a month away. 500 or so people will attend.

Four years ago in Virginia I spoke at RubyConf. People were always taking pictures of the speaker, so I decided that the speaker should take a picture of the audience.

This (taken with my cell phone) is it:

That’s pretty much everyone attending the conference. That was when you really could know the name of everyone who attended. When almost everyone there was making a living doing Not Ruby work, but banging out a cool Ruby project on the side. When folks hung out in the bar and lobby hacking on Ruby code (and not playing Werewolf) ‘til the wee hours.

Different.


add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl

Thu 16 October, 2008

Click here to bookmark this link.Channel Image12:39 My Day, Yesterday» Projectionist
Click here to bookmark this link.Channel Image12:39 Cannot construct the infini...» Projectionist
Cannot construct the infinite type.

Glasgow Haskell Compiler


add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Click here to bookmark this link.Channel Image01:12 Wii+Ruby notes» James Britt - Code, Content, Caffiene

I added some notes about my Wii+Ruby talk to the Ruby::AZ site.

If anyone has question about it, please drop me some E-mail (see here for contact details) .

When I have an actual complete app I’ll post the code.


add to del.icio.us add to del.icio.us. look up in del.icio.us.   add to furl.net add to furl
Sources