News for hackers. Stuff that matters.

A comment on Ruby Central's Attack on RubyGems [pdf]. Parent comment

Re:Ruby Central's Attack on RubyGems [pdf] by loloquwowndueo on Friday September 19, 2025 @10:15AM (#45301919)
Totally reads like post-facto CYA. they could have communicated this to the maintainers internally beforehand instead of blindsiding them.
[ Parent | on HN ]
Re:Ruby Central's Attack on RubyGems [pdf] by downrightmike on Friday September 19, 2025 @12:51PM (#45303795)
The NPM breach was an email that stated the dev needed to update their MFA by the next day in order to keep their access.

If you're arguing that is what ruby central should have done, that's a social engineering attack.

[ Parent | on HN ]
Re:Ruby Central's Attack on RubyGems [pdf] by loloquwowndueo on Friday September 19, 2025 @02:10PM (#45304659)
It’s entirely possible to distinguish between legit internal communication and a phishing email. (It gets harder and harder every day but ultimately still possible)
[ Parent | on HN ]
Re:Ruby Central's Attack on RubyGems [pdf] by mrinterweb on Friday September 19, 2025 @05:54PM (#45307157)
How would a heads up email look like a phishing email? Blindsiding the maintainers like this is just cruel.
[ Parent | on HN ]