Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ruby core team takes ownership of RubyGems and Bundler

ruby-lang.org

Post reply on HN
Print view View original

271–280 of 407 posts

Re: Ruby core team takes ownership of RubyGems and Bundler

#271

Post by zahlman »

fba11837 wrote: post #259
zahlman wrote: post #245

Earlier quoted context omitted.

> but you're not allowed to call that out, because "it's not nice". I don't know about the Ruby community, but I've seen this sort of complaint made about many other online spaces (including HN) and my general finding is that it simply isn't true. The problem is that for a proper call-out, both form and content matter, and most people in a mindset to make call-outs don't seem very interested in norms surrounding eith…

Try calling out Python's inner circle politely while they are openly rude to you. You do know that you also have keep up the pretense of Kim Yong Un as a glorious and benevolent leader even if he imprisoned some of your relatives. This is a response to your generalization, I do not know anything about Ruby politics.

(I'm assuming this is a throwaway account from someone with some insight into the PSF, and not some random person who just happened to choose this subthread as an entry into participating in the HN community. If I'm wrong about that, I'd strongly urge you to reconsider your approach.)

> Try calling out Python's inner circle politely while they are openly rude to you.

...You do know who you're responding to, right? I have first-hand experience of that (https://zahlman.github.io/posts/2024/07/31/an-open-letter-to...). (Although I don't think most of their rudeness is intentional; it seems to come from a failure to understand that not everyone has the same social norms.) I spoke in generalities for a reason.

The current situation is ultimately mostly about callouts of DHH, which are happening all over the place (including here) and the form and substance of most of those callouts is... not good.

Re: Ruby core team takes ownership of RubyGems and Bundler

#274

Post by jzb »

majkinetor wrote: post #159
ameliaquining wrote: post #87

Earlier quoted context omitted.

This is missing an important part of the story that makes the Ruby Central side look relatively better, which is that one of the existing maintainers offered to help fill the funding gap in exchange for being allowed to monetize the server logs. https://rubycentral.org/news/rubygems-org-aws-root-access-ev...

How do you monetize the server logs ?

Try to identify companies making heavy use of $thing and use that as leads.

Re: Ruby core team takes ownership of RubyGems and Bundler

#275

Post by ergocoder »

brightball wrote: post #83
itsnowandnever wrote: post #31

this is good and I hope this puts a lot of the drama in the rearview mirror. younger developers coming across Ruby must be like "wtf" about this situation. very peculiar to have these projects so politicised and I say that to the people that "try and keep politics out" (DHH) more than anyone. making your politics known and then being like "but you're not allowed to have an opinion on it" is't cute or clever. it's chi…

He's also in a bit of a unique situation because of his public political profile was essentially forced. - Politics at work were becoming a huge problem at 37Signals - They asked that politics be kept out of company chats, but encouraged people to be political active on non-work channels/social media/etc even during work hours - People lost their minds at this incredibly reasonable request which then blew up on the i…

DHH is at worst in the middle between left and right in the political spectrum.

Keeping politics out of work place is like an extremely mild stance.

For some reason, people label him as facist...

Re: Ruby core team takes ownership of RubyGems and Bundler

#276

Post by damagednoob »

MatthiasPortzel wrote: post #187
joshmn wrote: post #46

This is the only outcome that anyone who touches ruby cannot be upset with.

This is only a win for Ruby Central. They haven't conceded anything and they've convinced Ruby Core to endorse them as the correct and true maintainers of RubyGems. > While repository ownership has moved, Ruby Central will continue to share management and governance responsibilities for RubyGems and Bundler in close collaboration with the Ruby core team. Andre has previously maintained that he owns a trademark on Bun…

>Andre has previously maintained that he owns a trademark on Bundler and he will enforce it against Ruby Central.

Well,

1. He's not fighting Ruby Central anymore, he'd be fighting the Ruby core team.

2. He's going to have a tough time asserting copyright on a name he didn't come up with on a project which shipped v1 before he joined.

3. If he believes the trademark belongs to the community, the right thing to do would be to transfer it to Ruby Core then, right?

Re: Ruby core team takes ownership of RubyGems and Bundler

#277

Post by ljm »

philipallstar wrote: post #186
mindcrash wrote: post #182

Earlier quoted context omitted.

If only the drama stopped there: * DHH is not only considered racist / fascist due to some blog posts, but also for making Hyprland the default DE in Omarchy, developed by someone who goes by the name Vaxry Vaxerski, who is also considered fascist and racist, and thus banned from contributing to freedesktop projects due to supposed breach of CoC: https://blog.vaxry.net/articles/2024-fdo-and-redhat * Hyprland and all…

> Hyprland and all its contributors are now also considered fascist from taking sponsorship money from 37signals This methodology is definitely not how you discover fascism. But it is how fascists and communists defined and traced their enemies in the 20th century.

Turns out guilt by association is problematic whether it’s a Gestapo tactic or a terminally online one.

People need to step back and breathe. It’s possible to feel one thing about a (frankly shite) blog post and its author without tarring everybody within six degrees of separation with the same brush, and it’s quite unsettling that people find such nuance so difficult.

Re: Ruby core team takes ownership of RubyGems and Bundler

#278

Post by dismalaf »

typpilol wrote: post #243
tptacek wrote: post #167

Earlier quoted context omitted.

Wait, you think the former maintainer breaking into Ruby Central's AWS account and changing its root password makes the former maintainers look better ?

that's the one thing I've heard them not address yet is the changing of the passwords.

Arko kind of did address it in his most recent blog post. He claims he was doing what was in Ruby Central's best interest.

Unfortunately for him he basically admitted to a crime because it came after he was terminated. He tried appealing to community and whatnot but anyone who's ever worked for a corporation knows that once you're terminated, it doesn't matter if HR forgot to take away your credentials or not, you simply don't attempt to access anything ever again. Having keys to something doesn't make you the owner.

Re: Ruby core team takes ownership of RubyGems and Bundler

#279

Post by jrochkind1 »

saghm wrote: post #149
gcr wrote: post #51

Earlier quoted context omitted.

For context, also check out their previous statement from September 19, which also "reflects our shared commitment to the long-term stability and growth of the Ruby ecosystem" [sic]: https://rubycentral.org/news/strengthening-the-stewardship-o...

> As the nonprofit steward of this infrastructure, Ruby Central has a fiduciary duty to safeguard the supply chain and protect the long-term stability of the ecosystem. In consultation with legal counsel and following a recent security audit, we are strengthening our governance processes, formalizing operator agreements, and tightening access to production systems. It took less than two weeks from this statement for…

Ruby Central has been the entity responsible for the infrastructure hosting rubygems.org the entire time. Literally since the beginning of rubygems.org. Any hosting bills, contracts, or agreements are in the name of the Ruby Central corporation and always have been, as far as I know. Any "previous maintainers" were working as contractors or employees of Ruby Central, if they were working on infrastructure.

The (open source) source code for rubygems and bundler, the libraries that rubyists use in their apps to manage gem dependencies, are potentially another story.

But the infrastructure, to have passwords to it, for rubygems.org, has been Ruby Central since the beginning of rubygems.org without any break. I don't know why people receiving checks from Ruby Central as contractors would think they had a personal right above Ruby Central to the infrastructure that Ruby Central has been running since long before they received those checks. Them thinking they did is sketchy.

Again, the open source source code, I agree, is another matter with other considerations. It has had many maintainers and contributors over time, including periods where development was not coordinated by Ruby Central. And all the code is owned by it's authors, and licensed MIT-style. But you're talking about passwords to infrastructure...

Re: Ruby core team takes ownership of RubyGems and Bundler

#280

Post by bl4kers »

mring33621 wrote: post #85
mring33621 wrote: post #72

NGL, the drama is entertaining. I'm sorry for Ruby people that are negatively impacted, tho. Lastly, Matz is the best!

So this whole thing stems from a dislike of DHH? It also seems like rubygems.org could simply fork the rubygems code, perform whatever 'security and governance' changes they believed were needed in their fork, and run with that? Isn't that the open source way of handling disagreements in direction?

> So this whole thing stems from a dislike of DHH?

Not really. Shopify threatened to pull funding for them which set the whole thing in motion

Post reply on HN