Conversation

Notices

1. Embed this notice
   Jan Lehnardt :couchdb: (janl@narrativ.es)'s status on Friday, 19-Sep-2025 20:36:03 JST Jan Lehnardt :couchdb:

   What the fuck is going on with Ruby? For the moment we have to consider all gems compromised: https://pup-e.com/goodbye-rubygems.pdf

   • Embed this notice
     jacobian (jacob@social.jacobian.org)'s status on Saturday, 20-Sep-2025 01:18:16 JST jacobian

     in reply to

     @janl ok so yes this looks really really bad but:

     ""we were offered millions of dollars from a hostile donor in exchange for control of the RubyGems infrastructure” <-- that's a HELL of an accusation to make, and I can't see any evidence of that whatsoever. Is there something I'm missing?

     Because otherwise until we learn more this really seems like a "never attribute to malice what you can attribute to incompetence" sort of situation - right?