←back to thread

Ruby Central's Attack on RubyGems [pdf]

(pup-e.com)
659 points jolux | 1 comments | 19 Sep 25 08:09 UTC | HN request time: 0.001s | source
Show context
thomascountz ◴[19 Sep 25 14:09 UTC] No.45301861[source]▶
An update from Ruby Central: Strengthening the Stewardship of RubyGems and Bundler

https://rubycentral.org/news/strengthening-the-stewardship-o...

replies(13): >>45301914 #>>45301919 #>>45301946 #>>45302039 #>>45302069 #>>45302082 #>>45302089 #>>45302099 #>>45302120 #>>45302227 #>>45302468 #>>45305713 #>>45308969 #
corytheboyd ◴[19 Sep 25 14:44 UTC] No.45302227[source]▶
Aren’t supply chain attacks caused by package maintainer accounts being compromised? I suppose too many people with keys to the package repository itself is also liability, but those accounts being compromised just hasn’t been what is happening.
replies(1): >>45302567 #
krmbzds[dead post] ◴[19 Sep 25 15:14 UTC] No.45302567[source]▶
[flagged]
woodruffw ◴[19 Sep 25 15:25 UTC] No.45302677[source]▶
Your last sentence reads like a weird swipe: as best I can tell, there's no cultural war dimension to this whatsoever?
replies(1): >>45302955 #
krmbzds[dead post] ◴[19 Sep 25 15:48 UTC] No.45302955[source]▶
[flagged]
the_hangman ◴[19 Sep 25 17:40 UTC] No.45304353{3}[source]▶
It's been a while but if memory serves me correctly the controversy at that time was actually about him unilaterally deciding that people at basecamp shouldn't be talking about politics in off-topic slack channels after people started trying to organize support for something he didn't agree with. IIRC something like 1/3 of the company quit at that time
replies(2): >>45304669 #>>45305644 #
krmbzds ◴[19 Sep 25 19:43 UTC] No.45305644{4}[source]▶
Am I the only one who feels like discussing politics at work is inappropriate? While I'm not apolitical, I appreciate having a space where the constant bombardment of politics is momentarily absent. It's refreshing to focus on work without the need for political discourse.
replies(2): >>45307358 #>>45309500 #
1. crote ◴[20 Sep 25 02:09 UTC] No.45309500{5}[source]▶
The problem is that everything is political: if politics don't impact you, you are living a very privileged life.

On the one hand, I do agree that endless debating over relatively minor ideological differences is pointless, and only going to lead to time-wasting and resentment. I certainly have the same desire for some peace and quiet, and being able to focus solely on my work.

On the other hand, we live in a society where questions like "am I allowed to use the office bathroom" have been made political, and where your coworkers are genuinely worried about whether they'll get arrested and deported from the country for no reason whatsoever during next week's sprint planning. Their issues are real and by definition require the business as an entity to respond to political developments.

You might have the luxury of putting your head in the sand and pretending they don't exist, but that's not going to magically solve your coworkers' problems. Unless the company wants to restrict its hiring to the absolutely minuscule group of people who will never be impacted by politics, it'll have to engage in some level of political discussion.