jcmfernandes

Did you really go through the trouble of creating an account just to spit trash? Damn!

Absolutely. I wouldn’t be surprised if they turned the heat up a little after the last incident. The result? Even more incidents.

> a well-formed CI system

Man :| no. I genuinely understand the convenience of using Actions, but it's a horrible product.

Tři oříšky pro Popelku. There's no competition.

The tone is off. Cloudflare shared a post-mortem on the same day as the incident. It's unreasonable to throw a "I wish technical organisations would be more thorough in investigating accidents".

With that said, I would also like to know how it took them ~2 hours to see the error. That's a long, long time.

You misspelled accountable.

Do you want to debate or continue with the gaslighting?

Copyright? WTF are you talking about? Who's talking about copyright? Did or didn't RC perform a hostile takeover of the repos?

I find your obsession over Andre's fault and disdain towards the stealing of the repos by RC amusing.

And you know what? I think you're right! What Andre did could constitute a crime. Any serious organization would lawyer up and go after him... right? RIGHT?

I'm questioning why they didn't call him. Why?

And why are you ignoring that RC did a hostile takeover of the repos? Again, RC stole the repos. What do you think of that?

Arko explained why he changed the password. Yes, he should have communicated the change, and that's on him. I still can't understand why RC preferred to publish a hit piece on him instead of... calling him to ask if he had changed the password? Bonkers.

Now, are you using that to justify the hostile takeover of critical infrastructure to the entire Ruby community? I'm baffled. RC did a *hostile takeover*. How many times do I have to repeat this?

> It doesn't matter why you break into your former employer's server.

Arko already stated that he didn't know he had been fired. Geez.

> You know Arko didn't even start working on Rubygems until it was nearly 10 years old, right?

The project was stolen from a set of maintainers, not just Arko. Let's stick to the facts: someone with admin rights over the repos revoked the access of other admins without their consent. What do you call this?

> One of the original authors is in here and on X saying he supports it being taken over by RubyCore. Which matters much more than whatever the maintainers who were locked out think.

How in the world is that relevant? I have a lot of respect for Rich, but he wasn't a maintainer.

Yes, and he already explained why he did it. Yes, he should have communicated it clearly. That's on him.

At the same time, why didn't RC call him to ask? Was it easier to write about a security INCIDENT throwing shade at Arko?

With that said, let's keep focused on the real issue: RC did a hostile takeover of the projects. That's not been properly disputed so far. Matz is, therefore, accepting to steward stolen projects.

He ran the idea by a group of people, nothing more. We can disagree with it — so did RC — but that was it: bouncing an idea.

He stated that he didn't know he had been terminated. RC admitted that no harm had been done. Yes, he should have communicated changing the password.

Arko explained why he changed the password; I agree that he should have communicated the change. Now, does that justify the hostile takeover of the projects? C'mon... folks, there was a hostile takeover of two projects. Will we, as a community, ignore that?

I don't understand how Matz accepted this as-is. Taking over these projects without addressing the takeover makes them toxic assets that will taint the Ruby community for a long, long time.

Loved the... argument?

Let's say all of that is true. Did or didn't RC perform a hostile takeover of the repos?

What wasn't factual in Joel's comment?

I don't understand why the move wasn't undone. This is essentially kicking the can down the road.

By not addressing HOW the project ended up in RC's hands, Matz is effectively whitewashing the move.

It's widely known - there are podcasts focusing on this - that Contributed Systems LLC is a one-man show.

An individual decided to stop donating 250k to an organization because he felt strongly about actions taken by the organization. How is this offensive?

Where to start...

DHH created Rails, but he didn't write Rails - a large community did. This is an attempt to be factual. Linus created Linux, but he didn't write Linux. Etc.

Criticizing an *individual* for stopping to *donate* is pointless.

Exactly. While it seems like the overarching goals were well-suited, the process was... WTF.

+1. I agree with George when he says that AI is many times being used as a replacement for poor tooling, but you know what? So be it.

Same here in Portugal.

My parents were in their early-to-mid 20s when the dictatorship ended here, and my mom speaks fondly of our dictator Salazar. She lost 2 out of 12 brothers and sisters — 3 months and 4 years old, respectively — to perfectly curable diseases, and 2 others are crippled because of health complications when they were children. None of the 10 that made it to adulthood studied past the 6th grade. My dad was sent to a Catholic boarding school 300 km away from his mom when he was 10, because she couldn't feed him; he only studied until the 4th grade and started working when he was 11 years old.

My mom votes for Chega, the far-right party, and my wife is an immigrant (and I'm an ex-emigrant). She resents her life, and Chega rides on that resentment. It's very painful to see loved ones drift into this hate.

It's nice, and there's an emacs mode for it: https://github.com/JasZhe/hurl-mode

The pope, as all humans, is fallible. It's only when speaks ex cathedra that his teachings are considered infallible. These are very rare (Francis never did it).

Now, I agree with you. As a Catholic, I'll support any pope, i.e., I want them to do good. That doesn't mean I have to be fond of him. I really liked Francis, though. I'm afraid I'll deeply miss his wisdom.

> An activity must encapsulate something much higher level than a single IO operation. So something like "Configure BGP on a router", "Start a VM" etc. It needs to be able to handle retries and thus be idempotent.

I was referring to the workflows, that is, writing the workflows in managed languages, not the activities.

Out of curiosity, are you working full-time on this? I'm working part-time on the same problem, looking to go full time soon, and it's interesting to see how the same ideas are popping up somewhat independently across different projects :) let me know if you're interested in chatting!