Top all-time · #1781
André Arko
Personal blog · andre.arko.netprogrammingculture
André Arko writes André.Arko.net, a personal blog at andre.arko.net about programming and culture. Since 2012, 43 different Hacker News readers have linked it 62 times, most often “The RubyGems "Security Incident"”. It is still writing: the last post was on 2026-09-16, and you can follow it by feed.
Most-linked posts?
- The RubyGems "Security Incident"9 people · 10 mentions · first linked 2025-10-10
- Stupid Jj Tricks4 people · 4 mentions · first linked 2025-09-28
- Bundler Belongs to the Ruby Community3 people · 3 mentions · first linked 2025-09-25
- Rv, a new kind of Ruby management tool3 people · 3 mentions · first linked 2025-08-26
- Delete tests3 people · 3 mentions · first linked 2025-07-02
- Rubygems, OpenSSL, and you2 people · 2 mentions · first linked 2013-04-13
- Beyond jj: config and tools ecosystem2 people · 2 mentions · first linked 2026-09-20
- Gem.coop, a Community Gem Server2 people · 2 mentions · first linked 2025-10-06
- Jj Part 4: Configuration2 people · 2 mentions · first linked 2025-10-17
- Towards an Amicable Resolution with Ruby Central2 people · 2 mentions · first linked 2026-04-02
What Hacker News says?
https://andre.arko.net/2025/09/28/stupid-jj-tricks/ some pretty neat jj tricks I just learned about!
Comment linking /2025/09/28/stupid-jj-tricks/
on “Claude Code 2.0”Submitted Bundler Belongs to the Ruby Community as a story · 373 points
HN discussionSee also: https://andre.arko.net/2025/09/19/goodbye-rubygems/
Comment linking /2025/09/19/goodbye-rubygems/
on “Ruby Central's Attack on RubyGems [pdf]”Submitted Rv, a new kind of Ruby management tool as a story · 333 points
HN discussionWith that interpretation Marty Haught attempted to incite a federal crime on Oct 3rd, where he tried to trick Arko into doing trial logins: https://andre.arko.net/2025/10/09/the-rubygems-security-inci... "Please confirm that you cannot access the Ruby Central AWS root account credentials, either through the console or by access keys." Alternatively, we could see the whole issue for what it is: a power struggle betwe…
Comment linking /2025/10/09/the-rubygems-security-incident/
on “Ruby core team takes ownership of RubyGems and Bundler”Submitted Rails on SQLite: new ways to cause outages as a story · 195 points
HN discussionAlright, let's extend it. You work for Microsoft as an independent contractor, as a night watchman/groundskeeper. So do a number of others. You were hired because you and your crew of weirdos were writing the story of advanced gardening and building maintenace; which people including those at many famous and powerful companies used and found useful. A number of years ago someone said "huh, maybe these guys should ge…
Comment linking /2025/09/25/bundler-belongs-to-the-ruby-community/
on “Ruby core team takes ownership of RubyGems and Bundler”Submitted The RubyGems "Security Incident" as a story · 177 points
HN discussion- re · 2025-10-17
> They removed other maintainers access to their AWS account, and one of them had allegedly taken a screenshot of the root password from a password manager Inaccurate: > Ruby Central also had not removed me as an “owner” of the Ruby Central GitHub Organization. They also had not rotated any of the credentials shared across the operational team using the RubyGems 1Password account. > I believe Ruby Central confused t…
Comment linking /2025/10/09/the-rubygems-security-incident/
on “Ruby core team takes ownership of RubyGems and Bundler” Submitted Delete tests as a story · 129 points
HN discussionThat "Executive Director" (whose salary is probably safe throughout all controversies!) does not sound very credible compared to: https://andre.arko.net/2025/10/09/the-rubygems-security-inci... I'm only going by the corporate narrative structure of the director's post, who clearly wants to throw someone under the bus and cover up organizational incompetence. "Open" source has become so despicable.
Comment linking /2025/10/09/the-rubygems-security-incident/
on “Ruby core team takes ownership of RubyGems and Bundler”Submitted In-Memory Filesystems in Rust as a story · 125 points
HN discussionThis is only a win for Ruby Central. They haven't conceded anything and they've convinced Ruby Core to endorse them as the correct and true maintainers of RubyGems. > While repository ownership has moved, Ruby Central will continue to share management and governance responsibilities for RubyGems and Bundler in close collaboration with the Ruby core team. Andre has previously maintained that he owns a trademark on Bu…
Comment linking /2025/09/25/bundler-belongs-to-the-ruby-community/
on “Ruby core team takes ownership of RubyGems and Bundler”Submitted Parsing logs 230x faster with Rust as a story · 78 points
HN discussionThe response to that: https://andre.arko.net/2025/10/09/the-rubygems-security-inci...
Comment linking /2025/10/09/the-rubygems-security-incident/
on “Ruby core team takes ownership of RubyGems and Bundler”Submitted Vim is the worst editor, except all the other editors as a story · 55 points
HN discussionRead his account of it ( https://andre.arko.net/2025/10/09/the-rubygems-security-inci... ) and you might change your mind (again).
Comment linking /2025/10/09/the-rubygems-security-incident/
on “Ruby core team takes ownership of RubyGems and Bundler”Submitted We want to move Ruby forward as a story · 34 points
HN discussionA brief announcement post: https://andre.arko.net/2025/10/05/announcing-gem-coop/
Comment linking /2025/10/05/announcing-gem-coop/
on “Gem.coop”Submitted Ruby Central's Destructive Legacy as a story · 12 points
HN discussionAndré is working on a combination of rbenv/asdf, bundler, and gem that I think is interesting. Not that they're wildly broken, but I'd rather have fewer tools and it always seemed a bit odd that they're separate when they're notionally managing the environment in which your ruby code executes. Given the rise in supply chain attacks, I'd also like a private rubygem instance where I can whitelist gems and even version…
Comment linking /2025/08/25/rv-a-new-kind-of-ruby-management-tool/
on “Gem.coop”Submitted Rv, a new kind of Ruby management tool as a story · 9 points
HN discussionRocket specifically? Lots of people like it. Rust generally? Stuff like https://andre.arko.net/2018/10/25/parsing-logs-230x-faster-w... is one success story we’ve already seen.
Comment linking /2018/10/25/parsing-logs-230x-faster-with-rust/
on “Rocket v0.4: Typed URIs, Database Support, Revamped Queries”Submitted Stupid Jj Tricks as a story · 6 points
HN discussionIt's explained in the article with a direct link to the merger agreement https://andre.arko.net/2025/09/25/bundler-belongs-to-the-rub...
Comment linking /2025/09/25/bundler-belongs-to-the-ruby-community/merger-agreement.pdf
on “Bundler Belongs to the Ruby Community”Submitted Goodbye, RubyGems as a story · 6 points
HN discussionI hadn't yet seen it when I wrote this, but 2 is pretty much exactly what Arko says: > Worried about the possibility of hacked accounts or some sort of social engineering, I took action as the primary on-call engineer to lock down the AWS account and prevent any actions by possible attackers. https://andre.arko.net/2025/10/09/the-rubygems-security-inci...
Comment linking /2025/10/09/the-rubygems-security-incident/
on “Rubygems.org AWS Root Access Event – September 2025”Submitted In-Memory Filesystems in Rust as a story · 5 points
HN discussionUpdate: https://andre.arko.net/2025/10/09/the-rubygems-security-inci... is pretty much exactly the kind of thing I expected here. Person with legitimate access doing their job, organization flailing around in the process of kicking people out that should never have been kicked out in the first place.
Comment linking /2025/10/09/the-rubygems-security-incident/
on “Rubygems.org AWS Root Access Event – September 2025”Submitted Four months of Ruby Central moving Ruby backward as a story · 4 points
HN discussion
