News for hackers. Stuff that matters.

krmbzds

Re:404 Deno CEO not found on Sunday March 22, 2026 @01:12AM (#47474681)
I'm waiting for the "10 Things I Regret About Deno" blog post.
Re:The Three Pillars of JavaScript Bloat on Sunday March 22, 2026 @01:02AM (#47474630)
JavaScript bloat is downstream of low FED interest rates.
Re:Ruby Core Takes Ownership of Rubygems and Bundler on Friday October 17, 2025 @02:40PM (#45620351)
Does that mean RubyCentral or anyone associated with them no longer have admin access to RubyGems GitHub organization? Watching the debacle unfold made me much less trusting of their "stewardship".

It's good to hear Ruby core team took the ownership. Thank you Matz.

Re:Ruby Core Takes Ownership of Rubygems and Bundler on Friday October 17, 2025 @02:20PM (#45620074)
Alive and well. I write Ruby every day and enjoy doing so. It's the only thing that consistently got better for me in the last 10+ years without losing it's simplicity and joy. Ruby is truly a programmer's best friend.
Re:Post office in France rolls out croissant-scented stamp on Friday October 17, 2025 @01:27PM (#45619372)
A story about a stamp with no picture of the stamp. Great journalism.

Here's the first search result with the actual picture of the stamp: https://www.thelocal.fr/20251009/french-post-office-rolls-ou...

Re:Tor browser removing various Firefox AI features on Thursday October 16, 2025 @01:12PM (#45607974)
They removed privacy.resistFingerprinting.spoofOsInUserAgentHeader a while back as well. I find that suspicious.
Re:Rubygems.org AWS Root Access Event – September 2025 on Thursday October 09, 2025 @06:57PM (#45533895)
All my comments on the previous thread has been retroactively flagged so I can attest to this.
Re:Digital ID – The New Chains of Capitalist Surveillance on Friday October 03, 2025 @05:46AM (#45460999)
The word "Capitalist" is casually thrown in with other bad things to make it look bad. Don't be tricked. Capitalism is a good and moral system. In fact, it is the only moral system that works. What's bad is central planning and government surveillance.
Re:Ruby Central's Attack on RubyGems [pdf] on Friday September 19, 2025 @04:07PM (#45305924)
Yes, the argument was: You shouldn't freeze the bank accounts of people (trucker or not) just because you disagree with them. I don't see how this can be seen as controversial. The relation to the subject of the thread is Ruby Central. Here's the relation: https://www.mermaidchart.com/play#pako:eNqrVkrOT0lVslJKL0osy...
Re:Ruby Central's Attack on RubyGems [pdf] on Friday September 19, 2025 @03:43PM (#45305644)
Am I the only one who feels like discussing politics at work is inappropriate? While I'm not apolitical, I appreciate having a space where the constant bombardment of politics is momentarily absent. It's refreshing to focus on work without the need for political discourse.
Re:Ruby Central's Attack on RubyGems [pdf] on Friday September 19, 2025 @11:48AM (#45302955)
Ah, yes, there is a man who created an opinionated web framework but his keynote was canceled after he voiced support for .. truckers? https://world.hey.com/dhh/no-railsconf-faa7935e
Re:Ruby Central's Attack on RubyGems [pdf] on Friday September 19, 2025 @11:27AM (#45302705)
You can read it here: https://world.hey.com/dhh/no-railsconf-faa7935e

The cancellation of DHH's keynote was purely political. At that time, RubyCentral's response was similarly uncommunicative and their explanation was BS.

This is not the first strike.

Re:Ruby Central's Attack on RubyGems [pdf] on Friday September 19, 2025 @11:14AM (#45302567)
When you become a RubyCentral employee you receive the sacred scroll of security enlightenment. A rare buff that grants total immunity to phishing attacks and extends its protective aura to all nearby gem maintainers. Alongside cyber invincibility, this scroll bestows heightened sensitivity to microaggressions, auto-formats your README files to align with inclusive language guidelines, and ensures you toe the party-line. /s
Re:Ruby Central's Attack on RubyGems [pdf] on Friday September 19, 2025 @11:06AM (#45302468)
> We thank the maintainers and respect their legacy.

After removing them without explanation, cutting them off projects they have maintained over a decade and ignoring them when they asked for restoration or dialogue. I feel sad for the maintainers. This is not how they deserve to be treated.

Re:Ruby Central's Attack on RubyGems [pdf] on Friday September 19, 2025 @09:12AM (#45301324)
Your account was created 5 minutes ago. Your username is "clanky". That's hilarious.

For future reference, the flagged parent comment was: "Slop."

Re:Ruby Central's Attack on RubyGems [pdf] on Friday September 19, 2025 @09:05AM (#45301255)
The recent actions taken by Ruby Central - removing long-time RubyGems and Bundler maintainers without warning, seizing administrative access, and consolidating control under a small, centralized group - represent a serious breach of trust within the Ruby ecosystem.

This was not a misunderstanding. It was a hostile takeover of key infrastructure, undermining both the long-standing maintainers and the broader community that relies on RubyGems and Bundler every day.

The Ruby ecosystem thrives on collaboration, openness, and mutual respect. What we've witnessed over the past week violates those principles. Ruby Central's actions - unilateral access revocations, exclusion of experienced volunteers, and refusal to engage in transparent dialogue - are not just organizational missteps. They're a threat to the decentralized and community-driven spirit that has sustained Ruby for decades.

I oppose this power grab.

Even more concerning is the idea that contributor access could become contingent on employment status or ideological alignment. Whether someone is employed by Ruby Central - or holds left-leaning, right-leaning, or apolitical views - should have no bearing on their ability to contribute to open source. Merit, dedication, and community trust must remain the foundation.

If Ruby Central is serious about supporting the Ruby community, they must:

- Immediately restore access to all maintainers removed during this incident.

- Publicly commit to a transparent, community-driven governance model, similar to what the RubyGems team had begun drafting.

- Respect the autonomy of open source maintainers, regardless of whether they are employed by Ruby Central.

- Acknowledge the harm caused by these actions and engage in meaningful dialogue to rebuild trust.

The Ruby community has always been about people - diverse, passionate, and united by a love for a beautiful language. It's time we demand that the institutions claiming to represent us act accordingly.

And if Ruby Central does not do this we must pressure sponsors to stop funding Ruby Central and ultimately; if all else fails, we must build and maintain our own infrastructure unencumbered by these shenanigans. Also, in order to re-establish trust in the community; the people responsible for causing this ruckus should be fired.

Ruby-Level Sponsors (Top Tier): Alpha Omega, Shopify, Sidekiq

Gold-Level Sponsor Flagrant

Silver-Level Sponsors: Cedarcode, DNSimple, Fastly, Gusto, Honeybadger, Sentry

Re:Ruby Central's Attack on RubyGems [pdf] on Friday September 19, 2025 @08:38AM (#45300982)
Your comment reminds me of this video: https://youtu.be/R3gef1Wn9BE
Re:My favourite Git commit (2019) on Thursday February 01, 2024 @12:49PM (#39218852)
I would just go with "Remove non-breaking space characters" instead of writing a Russian novel.

Also, if you're on macOS just use a Karabiner rule [0] that converts all non-breaking space characters to regular space characters to prevent yourself from accidentally typing it out.

[0] https://ke-complex-modifications.pqrs.org/#nonbreaking_space

Re:Rage: Fast web framework compatible with Rails on Tuesday December 12, 2023 @01:37AM (#38610294)
I think DHH makes a good argument in Rails World 2023 Opening Keynote; in particular "Fed Pauses Rate Hikes But Stiffens Long-Term Outlook" slide.

Check it out: https://youtu.be/iqXjGiQ_D-A?t=665

Re:Rage: Fast web framework compatible with Rails on Tuesday December 05, 2023 @03:29AM (#38528294)
> API-only - the only technology we should be using to create web UI is JavaScript. Using native technologies is always the most flexible, scalable, and simple solution in the long run. Check out Vite if you don't know where to start.

Thanks. I'll pass on that one. Nevertheless, both rage and iodine seem like pretty cool projects FWIW.

Re:Web Scraping Using ChatGPT – Complete Guide with Examples on Friday September 29, 2023 @05:39PM (#37710402)
They opened browsing feature for Plus and Enterprise users 2 days ago.
Re:Web Scraping Using ChatGPT – Complete Guide with Examples on Friday September 29, 2023 @10:03AM (#37704421)
Side note: Add this to your robots.txt if you don't want ChatGPT to scrape your website:

  User-Agent: ChatGPT-User
  User-Agent: GPTBot
  Disallow: /
Sources:

- https://platform.openai.com/docs/gptbot

- https://platform.openai.com/docs/plugins/bot

Re:You're doing two-factor authentication wrong on Thursday June 22, 2023 @05:52AM (#36429889)
I think the argument for something you have is cyber-physical security. No matter how advanced malware is it won't be able to extend a finger through your monitor and tap the capacitive touch sensor of your Yubikey.
Re:You're doing two-factor authentication wrong on Wednesday June 21, 2023 @05:57AM (#36416552)
You might get pwned by (1) the government, (2) your mobile carrier, or (3) a hacker that can social-engineer your mobile carrier's tech-support (SIM jacking / SIM swap attack).

Older »