5 ms·

Or you could update your Rails version so the problem is gone? if you want to learn Django, do it, but the Rails World is certainly not in ruins or shattered b

by Buzaga 14y ago

Or you could update your Rails version so the problem is gone? if you want to learn Django, do it, but the Rails World is certainly not in ruins or shattered because of this, "move frameworks" because of this doesn't make a much sense... you could as well have said "in light of Django Unchained popularity is now a good time to learn Django?"

padseeker 14y ago
There is a very logical reason why I asked the question and mentioned Django, not all of which was spelled out in my post; 1. I want to use a widely supported framework, and Django seems to be the most likely candidate. There are a lot of things I like about Rails, but perhaps the best thing about it is there are so many gems/plugins that make extending an application very easy. 2. I have already updated my app so it is running the latest (and patched) version of Rails. The problem is in the article by Patrick Mackenzie (see here - http://www.kalzumeus.com/2013/01/31/what-the-rails-security-issue-means-for-your-startup/ http://www.kalzumeus.com/2013/01/31/what-the-rails-security-...) it seemed to indicate there are a lot more gotchas in Rails that will emerge as time goes by which is very concerning. The couple of things I don't like about Rails is deployment and too much magic. In light of the security issue if there are that many potential issues with YAML then I wanted to know if Django was measurably more secure as well as easier to deploy, and if it had less magic. Perhaps I should have spelled those things out. One more thing - I found your comment about Django Unchained comment rather snarky and a little insulting. It's as if the the security problems in Rails (2 of them found in the past month and more to come apparently) gives me a chance to change my framework as if it were like a fasion trend. There are a lot of moving parts in rails and I don't understand all of it, I've never read the source code. I've already invested quite a bit in learning Rails but now I am at a cross roads, do I go full monty and learn all the ins and outs of Ruby, or do I consider looking elsewhere. Your post definitely has a condescending tone and I did not appreciate it. Please think about why you are posting before you add to a thread.
- Buzaga 14y ago
  You're right, sorry, I've been in a terribly bitter mood lately and I'm not proud of this comment I hadn't read this post yet, it sure is alarming but I trust the ruby/rails community in the sense that it was always pretty fast to adopt, reject and take action on things and that it will keep this relative efficiency, specially against problems like these so at least this is something we can trust, I guess. As for Django, go for it... it's just that this problems look really ugly in hindsight... 3 months ago it probably was, for most people, that Rails had most of good security stuff built right in, it can happen in another framework, in linux, or ubuntu next, that sort of thing...
- clark-kent 14y ago
  The solution to understanding the Rails magic is to learn the ins and outs of Ruby. You will find out that it's just Ruby programming and it's not magic at all.

by Buzaga 14y ago

padseeker 14y ago

There is a very logical reason why I asked the question and mentioned Django, not all of which was spelled out in my post; 1. I want to use a widely supported framework, and Django seems to be the most likely candidate. There are a lot of things I like about Rails, but perhaps the best thing about it is there are so many gems/plugins that make extending an application very easy. 2. I have already updated my app so it is running the latest (and patched) version of Rails. The problem is in the article by Patrick Mackenzie (see here - http://www.kalzumeus.com/2013/01/31/what-the-rails-security-issue-means-for-your-startup/ http://www.kalzumeus.com/2013/01/31/what-the-rails-security-...) it seemed to indicate there are a lot more gotchas in Rails that will emerge as time goes by which is very concerning. The couple of things I don't like about Rails is deployment and too much magic. In light of the security issue if there are that many potential issues with YAML then I wanted to know if Django was measurably more secure as well as easier to deploy, and if it had less magic. Perhaps I should have spelled those things out. One more thing - I found your comment about Django Unchained comment rather snarky and a little insulting. It's as if the the security problems in Rails (2 of them found in the past month and more to come apparently) gives me a chance to change my framework as if it were like a fasion trend. There are a lot of moving parts in rails and I don't understand all of it, I've never read the source code. I've already invested quite a bit in learning Rails but now I am at a cross roads, do I go full monty and learn all the ins and outs of Ruby, or do I consider looking elsewhere. Your post definitely has a condescending tone and I did not appreciate it. Please think about why you are posting before you add to a thread.

Buzaga 14y ago
You're right, sorry, I've been in a terribly bitter mood lately and I'm not proud of this comment I hadn't read this post yet, it sure is alarming but I trust the ruby/rails community in the sense that it was always pretty fast to adopt, reject and take action on things and that it will keep this relative efficiency, specially against problems like these so at least this is something we can trust, I guess. As for Django, go for it... it's just that this problems look really ugly in hindsight... 3 months ago it probably was, for most people, that Rails had most of good security stuff built right in, it can happen in another framework, in linux, or ubuntu next, that sort of thing...
clark-kent 14y ago
The solution to understanding the Rails magic is to learn the ins and outs of Ruby. You will find out that it's just Ruby programming and it's not magic at all.