Blogs
Rails CVE-2025-55193 and CVE-2025-24293 | Greg Molnar
We had two news Rails CVE published recently and both of them looks interesting from an exploitation stand point so I wanted to explore what could be achieved with them.
Let’s look into CVE-2025-55193 first. It is an ANSI escape injection vulnera...
Unlocking Ractors: generic instance variables | byroot’s blog
In two previous posts, I explained that one of the big blockers for Ractors’ viability is that while they’re supposed to run fully in parallel, in many cases, they’d perform worse than a single thread because there were numerous codepaths in the R...
Consider Thruster with Puma on Heroku | Island94.org
To briefly catch you up to speed if you haven’t been minutely tracking Ruby on Rails performance errata: the Puma webserver has some mildly surprising behavior with the order in which it processes and prioritizes requests that are pipelined throug...
Achieving Multitenancy in a Rails App Using CurrentAttributes | Hashrocket
While working with a legacy BBj PRO/5 database for a client, we needed to set up a new CMS with multitenancy requirements. We were dealing with a slew of foreign tables representing the PRO/5 data, and each of the tables had a column for designati...
Reflections on RailsConf 2025 From Shan Cureton, Executive Director of Ruby Central
There was something deeply meaningful about hearing from attendees about why they come to this conference, and how this year felt uniquely different from years past. That kind of feedback matters, especially as Ruby Central is asking big questions...
What’s wrong with the JSON gem API? | byroot’s blog
As I mentioned at the start of my Optimizing Ruby’s JSON series of posts, performance isn’t why I candidated to be the new gem’s maintainer.
The actual reason is that the gem has many APIs that I think aren’t very good, and some that are outright...
70 Companies You Didn't Know Were Using Rails in 2025
For twenty-two years, thoughtbot has helped companies and organizations of all sizes build maintainable, scalable, and useful software. While Ruby on Rails is often associated with startups and MVPs, it’s also been quietly powering major systems i...
What we learned from creating PostCSS—Martian Chronicles, Evil Martians’ team blog
In 2013, I decided I no longer wanted to manually manage vendor prefixes like -webkit- in CSS. At the time, the common solution was to use Sass mixins, but I wanted something more automatic. The best UI is just having your problem solved without a...
Visit our blog
