Valentino Stoll

yep I don't know the desire for specialists is like kind of still important right like yeah yeah it is you're still gonna need somebody to work specifically on security at some point if you if that's part of your core business right and or if you have regulatory aspects of your business you know you're gonna have these specialists that are in demand no matter what so I don't know the

yep I don't know the desire for specialists is like kind of still important right like yeah yeah it is you're still gonna need somebody to work specifically on security at some point if you if that's part of your core business right and or if you have regulatory aspects of your business you know you're gonna have these specialists that are in demand no matter what so I don't know the

It's hard because as a perfect example of security, active record encryption is awesome. When they were first releasing that, they had a third party auditor come in and make sure that all of the encryption stuff, because nobody's working on encryption stuff specifically on the Rails core team. I mean, there are a handful of people that have knowledge of it, right? Yeah.

It's hard because as a perfect example of security, active record encryption is awesome. When they were first releasing that, they had a third party auditor come in and make sure that all of the encryption stuff, because nobody's working on encryption stuff specifically on the Rails core team. I mean, there are a handful of people that have knowledge of it, right? Yeah.

But they're not, like, working on the new algorithms, you know?

But they're not, like, working on the new algorithms, you know?

Right. Yeah, like, what are they sneaking in, right? Yeah. Yeah, it just reminds me of that. And because Adam Gordon Bell, he has this great podcast, The Co Recursive Podcast, and he had somebody on. They did this whole like dialog, like reenacting that security incident recently.

Right. Yeah, like, what are they sneaking in, right? Yeah. Yeah, it just reminds me of that. And because Adam Gordon Bell, he has this great podcast, The Co Recursive Podcast, and he had somebody on. They did this whole like dialog, like reenacting that security incident recently.

that made it into the compiler kernels, um, from some like, you know, Chinese co-conspirator supposedly like, you know, they don't really know like too much of the details, but just like, you know, part of the, I forget, was it the GNU compiler? It was some, something tangentially related to the assembly aspects of compiling, uh, where they were able to get like, uh, you know, a, uh,

that made it into the compiler kernels, um, from some like, you know, Chinese co-conspirator supposedly like, you know, they don't really know like too much of the details, but just like, you know, part of the, I forget, was it the GNU compiler? It was some, something tangentially related to the assembly aspects of compiling, uh, where they were able to get like, uh, you know, a, uh,

I don't know, some kind of permutation to the compiling that made it inject code with anything that was compiled with it. And that spread like crazy. It was just a very interesting dialogue. but eventually think of this stuff, right? Like, you know, what else is just like in there?

I don't know, some kind of permutation to the compiling that made it inject code with anything that was compiled with it. And that spread like crazy. It was just a very interesting dialogue. but eventually think of this stuff, right? Like, you know, what else is just like in there?

There's no, I mean, you'd be selective of your contributors, but I don't know that that's a, like a long winded thing about, you know, specialists really, but like, you know, I don't think we should shy away from them. And you know, the more we can keep things modular and accessible, the better that the framework will be. But,

There's no, I mean, you'd be selective of your contributors, but I don't know that that's a, like a long winded thing about, you know, specialists really, but like, you know, I don't think we should shy away from them. And you know, the more we can keep things modular and accessible, the better that the framework will be. But,

Yeah, I don't disagree with that. I think having the tools and the framework that makes that easier to do the better, like all these generators are great. I mean, to be honest, I would like to see some improvements there to the whole generator aspect of things and customization, uh, which I know you already can do, but, uh, I don't know.

Yeah, I don't disagree with that. I think having the tools and the framework that makes that easier to do the better, like all these generators are great. I mean, to be honest, I would like to see some improvements there to the whole generator aspect of things and customization, uh, which I know you already can do, but, uh, I don't know.

It seems like, uh, not straightforward as a first time user on like what you can generate, what's available, like the, you know, that is definitely discoverability is definitely still a problem yeah which the the guides are great i'm so happy to see all the documentation you know getting the tender loving care that it needs

It seems like, uh, not straightforward as a first time user on like what you can generate, what's available, like the, you know, that is definitely discoverability is definitely still a problem yeah which the the guides are great i'm so happy to see all the documentation you know getting the tender loving care that it needs

But, you know, it's still like discoverability problem is, you know, even on the development side is still an issue. I don't know. What do you what do you point people to that? Like, let's say you're talking with somebody on the JavaScript side and you're like trying to convince them, you know, hey, like, it's not so hard. Like, what do you point them at?

But, you know, it's still like discoverability problem is, you know, even on the development side is still an issue. I don't know. What do you what do you point people to that? Like, let's say you're talking with somebody on the JavaScript side and you're like trying to convince them, you know, hey, like, it's not so hard. Like, what do you point them at?