Rails World 2025: Developer Reflects on Skipping Conference and Divisive Keynote

·5 views

Rails World took place this week in Austin, drawing over 1,200 attendees, but one developer chose to skip it due to scheduling conflicts with another conference and workplace deadlines. For the first time, the opening keynote was livestreamed, giving remote viewers a chance to watch. Many in the community reacted negatively to the keynote, which featured DHH speaking at length about how little Ruby he writes, prompting criticism that it struck a mournful rather than inspiring tone. The author contrasted this with their first conference experience at RubyConf 2018, where creator Matz delivered an energizing address about the language's future. Reflecting on large conferences broadly, the author noted their value in offering multiple tracks, networking, and community connection, while acknowledging that the personal experience often hinges on the people you meet rather than the keynotes.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

How unprepared management derailed a SaaS project and stalled a developer's career

A developer identified in the account as Maria spent seven months building a solid frontend from scratch for a SaaS overhaul at a small tech firm, only to have her work discarded when a newly hired senior developer convinced management to adopt a purchased template instead. The decision was made based on seniority rather than technical merit, setting a pattern where proven contributions were overridden without structured debate. When a core technology update caused the template to break four months before launch, neither the senior developer nor the team could resolve the incompatibility, forcing the project to be rebuilt on a third template. A project originally scoped for under one year stretched beyond two years with no clear completion date, accumulating technical debt at each restart. The account highlights how amateur project management — treating technology choices and deadlines as unrelated decisions — ultimately burdens frontline developers while shielding decision-makers from accountability.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Stored XSS Flaw Found in Next.js Demo Store via Malicious SVG Upload

A stored cross-site scripting (XSS) vulnerability was discovered in OopsSec Store, a deliberately vulnerable Next.js e-commerce app used for security training. An attacker with admin access could upload a malicious SVG file as a product image, embedding JavaScript that executes automatically for every visitor who views the product page. The flaw existed because the server trusted the client-supplied Content-Type header without inspecting actual file contents, and the app rendered SVGs using an img tag that allowed script execution. The vulnerability affected multiple endpoints, including the product page, admin preview, and the direct file URL. Recommended fixes include magic-byte file inspection, server-side SVG sanitization with DOMPurify, and strict Content-Security-Policy headers on the uploads directory.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

broot's whale-spotting mode and staging area streamline disk cleanup in one pass

When disks fill up, engineers typically rely on repetitive du and rm commands that only show flat directory totals, requiring deletions one folder at a time. The broot file manager offers an alternative workflow using its whale-spotting mode, launched with br -w, which sorts files and directories by size in an interactive tree. Users can press Ctrl-G on any file to add it to a staging panel, building a review set and seeing the total space to be freed before deleting anything. Once the desired files are collected, switching focus to the staging panel with Ctrl-Right and typing :rm removes the entire set in a single step. The workflow reduces disk cleanup to three stages — list, review, and delete — replacing the traditional back-and-forth loop with a single interactive session.

0 comments Read more at DEV Community

ProgrammingHacker News ·

Zelensky warns Russia expanding strikes to target Ukraine's data centres

Ukrainian President Volodymyr Zelensky has stated that Russia has broadened its military attacks to include strikes on Ukraine's data centres. The escalation marks a shift in targeting strategy, moving beyond traditional infrastructure to digital and technological facilities. Zelensky made the announcement as part of ongoing efforts to highlight the evolving nature of Russian aggression against Ukraine. The targeting of data centres raises concerns about disruption to critical digital services and information infrastructure within the country.

0 comments Read more at Hacker News