Send us Fan Mail

What happens when a conference talk becomes dangerously obsolete just one week before showtime? That urgent pivot tells you everything about the pace of modern security work in the Ruby ecosystem.

Mike Dalessio, newly inducted Rails core team member, joins Joe Leo for a conversation that is genuinely packed and genuinely important. Mike's path to the core team runs directly through his maintenance work at 37signals, where his security-focused tooling helped Rails handle the enormous volume of vulnerability reports the team receives. Efficiently and thoughtfully, rather than in a constant state of panic.

Perhaps the most concrete thing Mike shares is Hot Cell, an architectural solution he built after discovering that Rails applications pull in approximately 100 image libraries through libvips. Instead of endless reactive patching, Hot Cell isolates image processing inside a sandboxed sidecar container with no application code, secrets, or network access. When a new arbitrary file read vulnerability appeared after deployment, attackers could only access the sandbox itself (which is exactly the point).

How should the broader developer community think about security when AI agents have dramatically expanded every application's attack surface?

Mike also reflects on his longtime Nokogiri maintenance, the CVE assignment delays leaving systems dangerously exposed, and his plans to democratize these security tools for gem maintainers everywhere.

Send us Fan Mail

We tackle one of the most pressing tensions in modern development: what happens when AI generates code but no one truly understands it? The hosts dig into some genuinely thorny questions about where human responsibility ends and AI capability begins, and the conversation gets heated in the best way.

From Rails World to Rust rewrites, this episode covers a lot of ground. DHH's case for AI code generation sits in direct contrast to Aaron Patterson's call to actually read your code (both perspectives, it turns out, have merit depending on context). The hosts also unpack Basecamp's eye-opening 95-times faster Rust rewrite of their chat application, and debate whether 37signals abandoning Ruby for Campfire undermines Rails' credibility.

What does it mean for the community when the framework's biggest champion starts reaching for different tools?

There's also genuine excitement here (and it feels earned) around Marco Roth's work on Herb, which uncovered 1,400 issues in Rails applications built up over eight to nine years. Ruby LLM 2.0.1 from Carmine Paulino, now supporting eighteen AI providers, gets serious praise as an impressive one-person open-source achievement.

Plus, the hosts don't shy away from OpenAI's unauthorized scraping of Australian government websites and what real accountability should look like.

Send us Fan Mail

"Programming isn't dying, it's evolving." That idea sits at the heart of this conversation recorded live from the Rails World conference, where Obie Fernandez joined the Buzzsprout studio to push back on DHH's keynote claim that programming is dead. Rather than panic, both speakers see this moment as another step up the abstraction ladder, similar to how developers once moved from assembly to compiled languages.

Historically, people have consistently underestimated the need for skilled developers, and that pattern appears to be repeating itself now. (It's almost comforting, really.) From Visual Basic to modern Rails frameworks, abstraction has always reshaped the craft without eliminating it.

What does it actually mean to be a programmer when code becomes disposable and "regenerative software" takes hold? The conversation wrestles with that genuinely unsettling question.

Because DHH recently revealed he's writing only three percent Ruby code lately, the stakes feel real for everyone in the Rails community. Fernandez argues that passion and adaptability matter more than attachment to any specific framework or label.

Drawing from careers spanning BBS systems, Java, and Rails, the speakers ultimately advocate for choosing optimism over fear when navigating uncertain futures. Tune in for a grounded, thoughtful take on where software development is actually headed.