Top all-time · #21312
Cristiano Betta
Personal blog · cristianobetta.com/blogprogrammingbusiness
Cristiano Betta's personal blog at cristianobetta.com covers programming and business. Since 2012, 3 different Hacker News readers have linked it 7 times, most often “Ruby gems are still not safe to use”. The last post was in 2018, but the archive is still widely read.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link this blog for its posts on software security, specifically the lack of package signing in language repositories such as RubyGems. The only comment cites it as a 'see also' with no judgement of the writing.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Cristiano Betta, co-founder and Chief Product Officer at Gr4vy (payment orchestration). Writing on payments, APIs and developer experience since 2012. London.
Most-linked posts?
- Ruby gems are still not safe to use2 people · 2 mentions · first linked 2013-02-02
What Hacker News says?
Furthermore, it doesn't appear that any of these fad language repositories do any sort of package signing, so you're vulnerable not just to the people who upload their own code, but anyone who may compromise the mirrors, too, because even if you trust the source, there's no way of verifying the code hasn't been modified on the mirror. See also: http://cristianobetta.com/blog/2013/02/02/ruby-gems-are-not-...
Comment linking /blog/2013/02/02/ruby-gems-are-not-safe-to-use/
on “Building HTML5 Apps with Yeoman and Backbone”Submitted Ruby gems are still not safe to use as a story · 58 points
HN discussionSubmitted Your mini-Heroku with Dokku and Dokkufy as a story · 3 points
HN discussionSubmitted Your mini-Heroku with Dokku and Dokkufy as a story · 3 points
HN discussionSubmitted Beginners notes on Puppet as a story · 1 points
HN discussionSubmitted Hacks/Products - A discussion on responsibility as a story · 1 points
HN discussionSubmitted What I miss about HackDays as a story · 1 points
HN discussion