Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I'm leaving Ruby Central

gist.github.com

Post reply on HN
Print view View original

101–110 of 134 posts

Re: I'm leaving Ruby Central

#101

Post by hobs »

3eb7988a1663 wrote: post #86
hiharryhere wrote: post #50

Earlier quoted context omitted.

If supply chain integrity is the issue specifically for Shopify, couldn’t they run their own private, internally facing gem repository and whitelist everything that goes there? It’s not a requirement to use the public rubygems.

I too am scratching my head at this. If the problem is the outside community could be a risk, just do not drink from the firehose. Have processes in place to slowly vet and bring the outside world indoors. Then again, that is not a very web scale suggestion.

I dont understand how "well let's just manage the entire ecosystem" could help this problem.

Re: I'm leaving Ruby Central

#102

Post by hellcow »

notatallshaw wrote: post #91
nenenejej wrote: post #48

The solution is to design package managers around the uniform resource identifier: a way to locate online assets that is mostly (ignoring DNS) decentralised and better than having one org own all the packages.

Taking PyPI as a central place of packages, it is known that their bandwidth bill would be $1.8+M per month ( https://dustingram.com/articles/2021/04/14/powering-the-pyth... ) were it not for Fastly giving them a 100% discount. Are there any reliable decentralized package distribution systems operating at within 2 orders of magnitude of that scale? How do they handle administrative issues such as malicious packages o…

Go does this, and I’d say it’s been highly successful.

Re: I'm leaving Ruby Central

#103

Post by jherdman »

ipaddr wrote: post #72
Analemma_ wrote: post #38

Earlier quoted context omitted.

[flagged]

Supporting Canadian truckers was a straw? And that somehow broke the camels back because of misogyny in slides and booth ads (showing a pretty girl?). Because of this they lost a 250,000 sponsorship from sideiq which then gave leverage to shopify to takeover the community because of a fear of this rv tool. In the end their communities purity tests lost them everything.

You need only skim his blog to see why. He’s increasingly hostile to minorities of all sorts.

Beyond that, Mike (author of Sidekiq) is more than welcome to withdrawal his funding as he wishes. That’s how this works.

Re: I'm leaving Ruby Central

#104

Post by dcrazy »

hosh wrote: post #75
dcrazy wrote: post #65

Earlier quoted context omitted.

> MVC and ORM had been around before web apps, but it was not consistently used in a web framework until Rails. WebObjects and EOF were the MVC and ORM frameworks powering Disney (Go.com) almost a decade before Rails existed.

Were those tech open source? A decade before Rails puts it in 1995. Do you have some resources on this? I like looking into the history of tech.

They were not open source. They were essentially NeXT’s only successful product. https://en.wikipedia.org/wiki/WebObjects

WebObjects was rewritten from ObjC to Java in the 2000s. EOF, the ORM layer it shared with NeXTSTEP/OPENSTEP, was rewritten as Core Data and released in Mac OS X Tiger.

Re: I'm leaving Ruby Central

#105

Post by mandevil »

hosh wrote: post #75
dcrazy wrote: post #65

Earlier quoted context omitted.

> MVC and ORM had been around before web apps, but it was not consistently used in a web framework until Rails. WebObjects and EOF were the MVC and ORM frameworks powering Disney (Go.com) almost a decade before Rails existed.

Were those tech open source? A decade before Rails puts it in 1995. Do you have some resources on this? I like looking into the history of tech.

WebObjects was demo'd in 1995, and Version 1.0 was released in March 1996, by NeXT (Steve Jobs and crew). In 1997 when Apple bought NeXT and made Jobs its CEO again, it became part of Apple who open sourced it in 2006 and maintained it until 2009 (it powered iTunes, among other things).

Re: I'm leaving Ruby Central

#106

Post by pygy_ »

ipaddr wrote: post #81
hosh wrote: post #69

Earlier quoted context omitted.

Chances are, this will make rv into a bigger success. Assuming the rv developers delivers on their promises. (I tried using their first version on launch only to find that the features I wanted have not been written yet). Where are you getting that Shopify fears rv?

They want Andre gone and won't allow him back according to the gist and this started because of the August 26 release where shopify starts worrying about security. The tool looks to replace gems and it's ecosystem.

And the best way to build trust in the new tool is naturally to sabotage the old one.

rv builds on André's reputation. The best way to squander it would be to attack the rubygem infrastructure.

Re: I'm leaving Ruby Central

#107

Post by __d »

Forgeties79 wrote: post #97
viccis wrote: post #85

Earlier quoted context omitted.

I used to think people here didn't really use them before AI, but I actually downloaded a dataset of all comments over like a decade or so and counted the number of comments with an em dash, and it didn't actually change much around 2022-2023 like I had expected. It's the spacing that's usually the giveaway to me, as well as the fact that it's not as common for people to use them like semicolons. They use them for pa…

I have a very conversational way of writing partially because I do voice to text a lot, so the em dash just “feels” better to me than a semicolon typically.

Agreed: a semi-colon is a bit stop-start, while a en-dash just flows.

I’ve used them, with spaces, for decades. Minus-minus in plain text, and autocorrect reads that nicely.

I sometimes use an em-dash, but mostly in LaTeX: they’re too awkward in plain text.

I use ellipses too …

Re: I'm leaving Ruby Central

#108

Post by kimos »

torben-friis wrote: post #28
jaredcwhite wrote: post #19

Earlier quoted context omitted.

In a word, yes.

What I don’t get is, what does Shopify get from this? I’m assuming there’s a ton of reputational risk in this move, and my understanding as an outsider is that Shopify already has a ton of weight in the Ruby ecosystem - they seem to be the one case quoted by everyone as the “proof that Ruby scales”.

It’s easy to point at politics or people and some sinister motive. Maybe that’s what it is. But don’t underestimate what can be accomplished through incompetence.

Shopify is a multi-billion dollar company that has processed over a trillion dollars. They are a high value target for sophisticated attackers. It’s entirely possible they are trying to accomplish some security and supply chain goals to protect their Ruby pipeline, but completely messed up the execution and did not predict the community interpretation and backlash.

Re: I'm leaving Ruby Central

#109

Post by kimos »

chuckadams wrote: post #94
jonquark wrote: post #20

For those (like me) who didn't understand what MINASWAN means, it stands for Matz Is Nice And So We Are Nice: https://en.m.wiktionary.org/wiki/MINASWAN

Not that he has any real power here, but has anyone asked Matz what he thinks about all this?

He usually just stays out of this stuff.

The funny thing about inventing a language you love, is you spend your career writing C rather than actually writing code in the language you love.

Re: I'm leaving Ruby Central

#110

Post by wahnfrieden »

tibbydudeza wrote: post #40
glimpse9348 wrote: post #34

Just a glimpse: > London is no longer the city I was infatuated with in the late '90s and early 2000s. Chiefly because it's no longer full of native Brits [1] [1] https://world.hey.com/dhh/as-i-remember-london-e7d38e64

I am so disappointed by this - thought he was a nice guy.

dhh is fully mask-off maga

He also has a history of this kind of posting

> There was the post where he described an ad featuring a plus-sized Black women as “grotesque” and celebrated the ads being replaced with ones featuring “blond babies”

Post reply on HN