Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Gem.coop

gem.coop

Post reply on HN
Print view View original

291–300 of 331 posts

Re: Gem.coop

#291

Post by hatthew »

krainboltgreene wrote: post #246
hatthew wrote: post #207

Earlier quoted context omitted.

My first-order heuristic is that legitimate websites tend to get one of the top TLDs (.com/.org, maybe .net/.io). In general, why should I trust domain_name.xyz over domain_name.com? There are obvious caveats, e.g. it doesn't matter as much for generic words like "gem" and for personal sites that I don't trust much in the first place. In this case, 3 seconds of critical thinking makes it clear that they have a plausi…

> My first-order heuristic is that legitimate websites tend to get one of the top TLDs (.com/.org, maybe .net/.io) This is so funny to hear after 18 years in the west coast silicon-valley lead tech industry. All of the app, io, tv, tech, guru, and now ai I've seen and only when it's "coop" does anyone complain.

I'm pretty sure people have been complaining about weird TLDs for as long as I've been on the internet. .guru, .tech, and .app are all equally untrustworthy to me. I don't recall seeing any .tv websites other than twitch. .io and (only recently) .ai are used often enough that it's contextually plausible a legitimate company would use one of those TLDs as their first choice, but if someone linked to chatgpt.ai or chatgpt.io for example, I'd still assume it's a scam.

Re: Gem.coop

#292

Post by mijoharas »

gkbrk wrote: post #201
mperham wrote: post #137

Earlier quoted context omitted.

Well maintained? Rubygems has had no commits in the last 10 days and that's not a good sign. I don't think you can find a window with no commits for 10 days in its 15+ year history. History has shown over and over that when a for-profit org takes over public infrastructure, maintenance is cut to the bone.

> Rubygems has had no commits in the last 10 days and that's not a good sign. I honestly can't tell if this is satire. You think no commits for 10 days for a piece of software that has existed for around 20 years is a sign that it's dead? What kind of code churn do you think this project requires? Perhaps the old development was too unstable if there wasn't a single 10 day window without a commit in 15 years, for wha…

Rubygems has 216 open issues right now.[0] Do you think some of them should be addressed? Without maintenance, and any PR's getting merged, they won't.

[0] https://github.com/rubygems/rubygems/issues

Re: Gem.coop

#293

Post by joeldrapper »

sussmannbaka wrote: post #192
phoronixrly wrote: post #72

Earlier quoted context omitted.

I don't plan on switching to a rubygems fork that does not offer technical/security benefits over the original. They can win me over with a gem distribution site that requires code signing out of the box and a bundler that enforces it out of the box.

They had a minor security incident right off the bat, demonstrating they don’t even fully understand what they stole. They aren’t equipped to do the job.

Only “minor” because they were in fact wrong about André being a risk. Had he been a real risk, this would have been about as major as it gets. They left him with root production AWS console and full production database access.

Fortunately he’s a standup guy and not a real security risk, so he emailed them immediately to let them know.

Re: Gem.coop

#294

Post by joeldrapper »

joeldrapper wrote: post #92
phoronixrly wrote: post #72

Earlier quoted context omitted.

I don't plan on switching to a rubygems fork that does not offer technical/security benefits over the original. They can win me over with a gem distribution site that requires code signing out of the box and a bundler that enforces it out of the box.

I expect a lot of people will stop pushing gem updates to `rubygems.org` once `gem.coop` supports publishing directly to namespaces.

Yes, I will be one of those people.

Re: Gem.coop

#295

Post by joeldrapper »

lbhdc wrote: post #183
spit2wind wrote: post #91

Earlier quoted context omitted.

Really? Maybe I'm naive, but why would .coop be blocked?

It is pretty common that "weird" tlds get blocked more or less whole sale in places you might not expect. The reason is spam. Before these can get wide spread "normal" adoption they can be heavily used by spammers. Its hard to say if that is because they have desirable look-a-likes available, or if its because the first year is offered at a deep discount. So, systems will get flooded, and on inspection they will see…

How does `.coop` get used for spam when you need to prove you’re an actual cooperative to get one?

Re: Gem.coop

#296

Post by joeldrapper »

mijoharas wrote: post #68

So, ignoring everything that got us here, what do people think about this? As I see it, there is the original rubygems, which has lost all of it's maintainers, and this new one, that has most of the original active maintainers? (how many were there before? it has most of the ones I think about, but I didn't know who was active over there. I mostly saw activity from deivid and didn't know about most of the others to b…

I believe the CDN is provided for free by Fastly. Not sure about other funding at the moment.

Re: Gem.coop

#297

Post by wizzwizz4 »

marknutter wrote: post #243
jaredcwhite wrote: post #205

Earlier quoted context omitted.

If you say something like “if you invoke the word "fascism" in the context of today's politics, your opinion is immediately worthless”, your opinion is immediately worthless.

Do you really not understand how unhinged you sound when you resort to such histrionics?

Those "histrionics" were your own words, slightly duplicated, with "say something like" added. While I don't disagree with this comment, I would recommend that you take the implied advice before expecting others to.

Re: Gem.coop

#298

Post by marknutter »

typpilol wrote: post #275
simianparrot wrote: post #270

Earlier quoted context omitted.

I thought so but didn’t want to assume. People really like to misuse terms like fascism these days, huh…

It's so crazy. He's a fascist because he said something about the chant population of London. And he didn't want politics at the work place How the hell is any of that facism

It's not. People use the term "fascism" to at best smear those who they disagree with and at worst incite violence against them.

Re: Gem.coop

#299

Post by marknutter »

wizzwizz4 wrote: post #297
marknutter wrote: post #243

Earlier quoted context omitted.

Do you really not understand how unhinged you sound when you resort to such histrionics?

Those "histrionics" were your own words, slightly duplicated, with "say something like" added. While I don't disagree with this comment, I would recommend that you take the implied advice before expecting others to.

Dismissing someone's opinion because they compare those they don't agree with to literal fascists is not the same as dismissing someone's opinion because they do that. One leads to people being targeted for violence and potentially assassinated, the other calls out incitement to political violence.

Re: Gem.coop

#300

Post by krainboltgreene »

veeti wrote: post #286
krainboltgreene wrote: post #252

Earlier quoted context omitted.

It's so weird of you to jump in like this, man.

It's weird for people to try and set the record straight when you mention them by name?

He didn't set any record straight. Why are you people imagining content?
Post reply on HN