News for hackers. Stuff that matters.

A comment on Rubygems.org AWS Root Access Event – September 2025. Parent comment

Re:Rubygems.org AWS Root Access Event – September 2025 by fouc on Thursday October 09, 2025 @11:22PM (#45535120)
I can only assume it is silly revenge seeking behavior. Look at how symmetrical it is:

  1. RC takes over GitHub Repository and locks everyone out
  2. Arko takes over RubyGems server and locks everyone out.
He was an authorized actor right up until they tried to remove him, but they forgot to revoke his access credentials. I wonder if legally-speaking he was even considered unauthorized.

EDIT: Missed their email notification revoking his production access. Yeah looks like they could have a legal basis.

[ Parent | on HN ]
Re:Rubygems.org AWS Root Access Event – September 2025 by heartbreak on Thursday October 09, 2025 @11:40PM (#45535184)
This is not legal advice, but if you get fired and then break into the office later, the police won’t care that you used your spare key.

Seems someone took it a step further and changed the locks too.

[ Parent | on HN ]