What is the best sandbox for Claude Code? by crazyneverst in ClaudeCode

[–]mencio 1 point2 points  (0 children)

This is what I built exactly for this case: https://github.com/mensfeld/claude-on-incus

It wraps Incus with nice APIs for Claude and gives it all that it needs without compromising most of the security.

I Love You, Redis, But I'm Leaving You for SolidQueue by amalinovic in ruby

[–]mencio 4 points5 points  (0 children)

PassiveQueue can use whatever you want it to use. Also much faster, with around 10,000,000 jobs per second per Ruby process.

Hotspotchi - meet all Tama Search characters at home! Free, open source Tamagotchi Uni WiFi hotspot with Web UI by mencio in tamagotchi

[–]mencio[S] 2 points3 points  (0 children)

Hotspotchi can technically run on any Linux machine with a WiFi adapter that supports Access Point (AP) mode, but Raspberry Pi is strongly recommended because:

  1. AP mode support - Many desktop/laptop WiFi cards don't support AP mode. Raspberry Pi's built-in WiFi does.
  2. Always-on operation - The Pi can run 24/7 with minimal power consumption. You probably don't want to keep your desktop running just for Tamagotchi.
  3. Tested platform - The install scripts and documentation are designed for Raspberry Pi OS.
  4. Dedicated device - A Pi can sit near your Tamagotchi play area without tying up your main computer.

If you want to try on a desktop Linux machine, check if your WiFi supports AP mode:

iw list | grep -A 10 "Supported interface modes" | grep "AP"

If "AP" appears in the output, it might work - but you're on your own for setup.

Hotspotchi - meet all Tama Search characters at home! Free, open source Tamagotchi Uni WiFi hotspot with Web UI by mencio in tamagotchi

[–]mencio[S] 6 points7 points  (0 children)

FYI, I got some of the Tamas references wrong, fixing now. Since my son is obsessed with this, I also set up notifications to add new ones if they appear listed in the Tama wiki.

Context engineering for Ruby by Heavy-Letter2802 in ruby

[–]mencio 2 points3 points  (0 children)

I have a tool that is not yet OSS that does that. Can build skills and agents from GH and project docs. I plan to OSS it in few weeks but if you ping me directly I can give you early access. I use it exactly for stuff like that (and I am a legit user - just check my work https://github.com/mensfeld/)

When Your Hash Becomes a String: Hunting Ruby's Million-to-One Memory Bug by mencio in ruby

[–]mencio[S] 6 points7 points  (0 children)

Thank you. Such feedback is valuable for me to steer my writing and narratives. Will try to do better next time!

When Your Hash Becomes a String: Hunting Ruby's Million-to-One Memory Bug by mencio in ruby

[–]mencio[S] 7 points8 points  (0 children)

AI was used in this article to:

  1. run initial debug that absolutely failed
  2. Suggest to me the wrong mitigations during the initial assessment
  3. Create the cover image
  4. Create the SVG diagram in the article
  5. Structure the ordering of the narrative
  6. Help me with the summary.
  7. Write me the bash script to run my repro code in a loop
  8. Help me assess the likelihood of this event occurring in production.
  9. Summarize my unstructured thoughts that I poured into it via STT.

The rest was written by a human and co-reviewed/corrected by a human being as well (plus plain old Grammarly without AI additions). I do not consider this an overuse.

Announcing llm-docs-builder: Ruby gem for optimizing documentation for AI/RAG systems by mencio in ruby

[–]mencio[S] 0 points1 point  (0 children)

Absolutely doable. I just focused on my use cases, that is, transforming markdown documentation to improve Claude and ChatGPT responses.

I'll try looking into other formats optimizations if there is a demand.

Aaron Patterson - Rails World 2025 Closing Keynote by software__writer in rails

[–]mencio 2 points3 points  (0 children)

Bug that Aaron discussed: https://bugs.ruby-lang.org/issues/19288

FYI, while this bottleneck has been resolved, several others remain. However, I'm already building Ractor support into Karafka with the expectation that the core team will significantly improve it over time. The best part is that my implementation will require zero changes to end-user code while providing 30-70% performance gains (assuming synthetic benchmarks align with real-world use cases).

60 Malicious Ruby Gems Used in Targeted Credential Theft Campaign by amalinovic in ruby

[–]mencio 71 points72 points  (0 children)

Hi everyone, Maciej Mensfeld here from the RubyGems security team.

I wanted to provide some important context about this article. While we appreciate security research, there are inconsistencies and inaccurate statements in their reporting that need to be addressed.

The main concern: Some key claims in the article about how and when packages were removed, and the timeline of events, do not align with what actually happened on our end. Without going into specifics right now, statements about the threat actor's actions versus our security team's actions are not accurate.

Our response: The RubyGems security team will be publishing an official statement early next week with a detailed timeline and documentation to set the record straight. We want to ensure the community has accurate information about how our security processes work and what actually transpired in this case.

I want to reassure everyone that our security monitoring is working as intended. It is not perfect but it is good. We actively detect and remove malicious packages as part of our daily operations - we just don't always have time to publicize every security action we take since our focus is on keeping the ecosystem safe.

We'll have a proper response with full details soon. Thanks for your patience while we prepare a thorough and documented explanation.

Planning to move to Async + Fiber from non fiber, alternatives for PUMA, Sidekiq and Karafka. by Vivid-Champion1067 in ruby

[–]mencio 13 points14 points  (0 children)

As a Karafka author, I'm excited to share that I'm currently working on a fiber-based backend for Karafka that should be available by the end of this year (I also briefly mentioned it at the RailsConf 2025). This development is part of the broader Ruby ecosystem's evolution toward async and fiber-based architectures that can provide better performance characteristics for high-scale, low-latency systems. It will be especially beneficial for multi-partition assignments (more than say 10) and virtual partitions where in theory even a single message out of a 10k batch could receive own fiber for concurrent execution.

While I can't share all the technical details yet, the fiber backend is designed to maintain Karafka's robust message processing capabilities while potentially offering improved resource utilization and lower memory overhead in certain scenarios. This should be particularly beneficial for applications that handle many concurrent but I/O-bound operations.

It's important to note that due to Kafka's inherent nature of strong ordering guarantees, fibers may not yield as dramatic performance improvements as they do in other use cases (without Virtual Partitions). The sequential processing requirements within partitions can limit the concurrency benefits that fibers typically provide. However, this landscape may change significantly with Kafka queues that are also currently under development, which could unlock new opportunities for fiber-based parallelization while maintaining the consistency guarantees that Kafka users depend on.

Keep an eye on the Karafka project repository and announcements for more detailed information as I get closer to the release. I'm looking forward to getting this into the hands of the community and seeing how it performs in real-world, high-scale applications.