News for hackers. Stuff that matters.
Re:Rubygems.org AWS Root Access Event – September 2025 by tptacek on Thursday October 09, 2025 @07:25PM (#45534070)
No, that's not at all clear. Ruby Central owns the AWS account for which Arko is (pretty clearly) being accused of changing the AWS root account password after having his access revoked.

I don't think for a second Arko will be charged, but there isn't a "nuh-uh, you did this gross thing in our open source community" defense for 18 USC 1030.

Re:Rubygems.org AWS Root Access Event – September 2025 by LamaOfRuin on Friday October 10, 2025 @08:49AM (#45538399)
I didn't say it was clear, and I never said there was a defense. I implied that the wronged party in one case might want to be careful about raising the specter of liability or criminality.