Conversation

Notices

1. Embed this notice
   Paul Cantrell (inthehands@hachyderm.io)'s status on Tuesday, 24-Sep-2024 14:16:03 JST Paul Cantrell

   I lost a day and a half of dev to figuring out that Omniauth is giving me CSRF rejections because Rails SSL middleware returns an array instead of a newline-separated string for Rack 3 but when Passenger added Rack 3 support it forgot to support the new array-based approach and Passenger stopped supporting the ancient version of Ubuntu this app is stuck with shortly before they patched the bug and

   diagnosing this was a J O U R N E Y

   • Embed this notice
     Paul Cantrell (inthehands@hachyderm.io)'s status on Tuesday, 24-Sep-2024 14:16:57 JST Paul Cantrell

     in reply to

     I’m not even mad, I’m just disappointed

   • Embed this notice
     Paul Cantrell (inthehands@hachyderm.io)'s status on Tuesday, 24-Sep-2024 14:20:54 JST Paul Cantrell

     in reply to

     • Scott Francis

     @darkuncle My yak is utterly bald now, going to bed

   • Embed this notice
     Scott Francis (darkuncle@infosec.exchange)'s status on Tuesday, 24-Sep-2024 14:20:55 JST Scott Francis

     in reply to

     @inthehands so much yak shaving

   • Embed this notice
     Paul Cantrell (inthehands@hachyderm.io)'s status on Tuesday, 24-Sep-2024 14:28:00 JST Paul Cantrell

     in reply to

     Worth noting that a statically typed language would have almost certainly prevented the Passenger people from making this mistake in the first place

     and also a less dynamic language that isn’t amenable to the sort of live modification of libraries I used to track this down would have made it easily 5x harder to diagnose if something like it did occur.

     It’s all tradeoffs.