Closing Keynote
summary
Talk details concrete outcomes and tools: a live streaming responses demo built with Puma, server‑sent events, DRb and filesystem watchers that actually updates browsers; Rails 4 adds UUID primary keys, Hstore/JSON support and faster test runs (speedup comes from avoiding multiple app boots, not per‑test improvement); a removed rails.que prototype fails because of serialization/AR object issues; two security bugs are dissected with exploit paths — a symbol DoS via XML params and an evaluated payload leading to YAML RCE — and incident handling, CVE cadence and backporting tradeoffs are explained.
AI-written summary · about
chapters (26)
- 0:00Introduction and stories
- 2:08Conference jokes
- 3:35Keynote structure
- 4:39About the speaker
- 10:13Consulting and search
- 13:31Rails updates
- 15:05Rails Q
- 17:36Mini test spec
- 19:36Burnout and deletion
- 20:48Streaming responses
- 23:12Rails 4 features
- 25:42Testing challenges
- 29:22Security process
- 32:45Analyzing vulnerabilities
- 34:29Symbol Denial of Service
- 37:15Detecting vulnerabilities
- 38:22YAML RCE exploit
- 42:09Security challenges
- 44:16Behavior changes
- 47:18Responsible disclosure
- 49:33Open source beginnings
- 51:55Mechanize story
- 54:15Working on open source
- 56:21Managing burnout
- 59:21Focusing on the future
- 1:01:13Conclusion
