Prem Sichanugrist
@sikac.hu
Ruby Engineer in Japan. Apple nerd. Fediverse: https://mastodon.social/@sikachu
@gruber.foo re: Siri AI giving out choices when it’s unsure, I find it easier to reply back to it with the choice number (i.e “the first one” or “the second one”) rather than saying the same thing to it again and hope it picks the right one.
I felt like you can tell how bad this vulnerability is by just looking at how many 6s in the CVE number 😈
[CVE-2026-66066] Possible arbitrary file read and remote code execution in Active Storage variant processing
See Possible arbitrary file read and remote code execution in Active Storage variant processing · Advisory · rails/rails · GitHub Impact In its default configuration, a Rails application that display...
discuss.rubyonrails.org
I don't understand why Next.js would call GET parameters (query parameters) "searchParams" ... that sounded so wrong. A search is a query, but a query is not always ended up as a search... nextjs.org/docs/app/api...
Functions: useSearchParams | Next.js
API Reference for the useSearchParams hook.
nextjs.org
Found an amazing dark pattern by Yahoo Japan. That "すべて解除" button is actually clickable (and it works!), but they make it gray so it looks like a disabled button 🙅♂️
If LINE ever release a LYP Premium exclusive LINE Light app that only have chat and mini app I’ll subscribe to that thing in a heartbeat.
Oh great LINE is finally removing their Tiktok/Instagram clone VOOM from their app! >This will later be replaced by a Shopping tab. What?
TIL my insurance company has monthly 20,000 JPY out-of-pocket limit so instead of 3,500 JPY per 15mg of Mounjaro injection (at 30% co-pay) it'll be down to about 1,666 JPY each after the reimbursement 🥹
RDoc 8.0.0 is out now. This is the biggest RDoc release in years, and it brings together a lot of the Ruby documentation work I talked about at RubyKaigi. Also, RDoc now has a logo!
Looks like Japanese netizens just took down X after a big earthquake near Tokyo.
I've recently been a fan of bundler/inline since it allows me to write scripts in Ruby without having to have a Gemfile, but I'm a bit annoyed that the `source` line is required otherwise the automatic installation will fail. I wish there's a way to set a default source via `bundle config` instead.
Maybe it's because I'm turning 40 but I felt like I'm happy as long as what I wrote was useful for people. I'm fine with being just some kilobytes in the training data, even after myself is long gone.
I finally moved my blog off from Medium because they finally pulled the plug on free custom domain. However, after seeing how they put in ad in the middle of the posts, I felt like I should have done it sooner. My most surprising thing however is that I still get traffic to them...
Please be Snow Leopard year please be Snow Leopard year please be Snow Leopard year #WWDC
What's with Persona 4 Reloaded and Persona 6 not releasing on Switch 2 😕
Amazing feature! 🥳 I think it's probably make sense for everyone to set this as a default on their machine: > bundle config set --global cooldown 7 For projects that you don't commit Gemfile.lock (i.e. gem development), it's probably worth setting `:cooldown` on the source in the Gemfile as well.
Hello Rubyist. Working hard all day is great, but maybe it's time to cool down. New in RubyGems/Bundler 4.0.13: blog.rubygems.org/2026/06/03/c...
Hello Rubyist. Working hard all day is great, but maybe it's time to cool down. New in RubyGems/Bundler 4.0.13: blog.rubygems.org/2026/06/03/c...
Cool down before you install: give new gems a few days to be vetted
Most supply-chain attacks against RubyGems exploit a narrow window: an account is compromised, a malicious version ships, and any bundle install in the minutes that follow resolves straight to it. ...
blog.rubygems.org
I think I just got nerd sniped.
Harder Drive: Hard drives we didn't want or need
YouTube video by suckerpinch
youtu.be
After hearing so much praises by @gruber.foo in The Talk Show, I felt like I am obligated to try this out.
thoughtbot is joining the Ruby Alliance, a coalition of companies investing in the long-term sustainability of Ruby infrastructure and the broader ecosystem. Here’s why we believe shared stewardship matters for Ruby’s future.
Why thoughtbot is joining the Ruby Alliance
thoughtbot is joining the Ruby Alliance, a coalition of companies investing in the long-term sustainability of Ruby infrastructure and the broader ecosystem. Here’s why we believe shared stewardship...
thoughtbot.com
Is there really no way to create @github.com PAT that has limited access to only some org?
I know that for RubyGems if you do `gem push` from command line you'll need to do 2FA to approve it. However, I assume those goes away once more and more gems move to use GitHub Actions to release the gem? I wonder if RubyGems or gem.coop would add this to the flow? docs.npmjs.com/staged-publi...
Staged publishing for npm packages | npm Docs
Documentation for the npm registry, website, and command-line interface
docs.npmjs.com
Just realized I could do `git rebase --interactive GIT_REF~1` after `git commit --fixup GIT_REF` so I here present you `gfuu` so you could do fixup and squash them up in a single step github.com/sikachu/dotf... Usage: `gfuu GIT_REF`
aliases: add gfuu to fixup and rebase immediately · sikachu/dotfiles@5893d53
github.com
@hsbt.org excuse me for contacting you via SNS. I'm not sure you aware but it seems like the latest workflow run on `ruby-build` to bump Homebrew formula failed, so the new version was not pushed to Homebrew. Would you mind taking a look when you have a chance? 🙇♂️ github.com/rbenv/ruby-b...
Somehow they are using single-width ! and ? instead of double-width! and ? in FH6 subtitles.
Downie Express returns with a new challenge: Can Mike and his friend Seb travel from Bangkok to Bali by train?
It seems like JR East was doing a public demo of using UWB for ticket gate, which is pretty damn cool. They clearly are the monopoly for closed-loop SFC platform, so it's nice to see them showing something beyond credit card's contactless payment.
UWB Mobile Suica isn’t just walkthrough gates, it’s payments too
Screenshot JR East held an open demonstration of next generation Suica today, UWB (Ultra-wideband) Mobile Suica, at the Takanawa Gateway City Studio open space area just outside of JR Takanawa Gate…
atadistance.net
If people pronounce SQL as "se-quel" why don't they also pronounce UUID as "yu-yud"?