Preferences

Wait, you think the former maintainer breaking into Ruby Central's AWS account and changing its root password makes the former maintainers look better?

soraminazuki
That's the narrative from the new Ruby Central, which feels like a wild distortion of the actual situation.

You’re likely aware, though it’s worth mentioning, that the new owners ousted all existing maintainers without any explanation[1]. This follows a prior incident where access was revoked and later restored, with assurances that it was a mistake. This situation can only be viewed as a malicious attack, in which only the new owners had a full understanding of what transpired. Changing the password was a reasonable and appropriate response that any competent person in a similar position would've considered.

I’m shocked that we seem to be experiencing a Freenode 2.0 situation, but with some supporting the usurpers instead of the longstanding maintainers. It’s only been four years since the Freenode debacle, yet certain types of people seem to have grown bolder since then. A "win" for freedom of expression, huh?

[1]: https://pup-e.com/goodbye-rubygems.pdf

tptacek OP
Did he or did he not log in to the AWS root account after losing his own credentials and change the root password? I don't need paragraphs of explication following that. Seems simple!
soraminazuki
You take issue with me using 148 words in my comment? Just 8 hours before you wrote that, you spent more words than I did downplaying problems with AI powered mass surveillance cameras. Are rules something you live by or something that you arbitrarily impose on others?

It’s telling that you can write multiple paragraphs claiming the moon is made of cheese while expecting others to communicate only in brief, misleading soundbites.

yawaramin
It's a yes or no question.
soraminazuki
The term you're looking for is a loaded question.

https://en.wikipedia.org/wiki/Loaded_question

Changing passwords was the responsible course of action to protect Ruby users in light of the attack. Maintainers should act in the interest of the Ruby community, not in favor of usurpers with a vendetta.

kmacdough
A question that was already asked and answered. The only reason to re-ask seems to be to pull it from context and apply black/white arguments to a complex sociopolitical event.
typpilol
that's the one thing I've heard them not address yet is the changing of the passwords.
dismalaf
Arko kind of did address it in his most recent blog post. He claims he was doing what was in Ruby Central's best interest.

Unfortunately for him he basically admitted to a crime because it came after he was terminated. He tried appealing to community and whatnot but anyone who's ever worked for a corporation knows that once you're terminated, it doesn't matter if HR forgot to take away your credentials or not, you simply don't attempt to access anything ever again. Having keys to something doesn't make you the owner.

jcmfernandes
He stated that he didn't know he had been terminated. RC admitted that no harm had been done. Yes, he should have communicated changing the password.
tptacek OP
He changed the AWS root password for the account.
jcmfernandes
Yes, and he already explained why he did it. Yes, he should have communicated it clearly. That's on him.

At the same time, why didn't RC call him to ask? Was it easier to write about a security INCIDENT throwing shade at Arko?

With that said, let's keep focused on the real issue: RC did a hostile takeover of the projects. That's not been properly disputed so far. Matz is, therefore, accepting to steward stolen projects.

typpilol
How would it protect anyone?

This item has no comments currently.