3 ms·
If you're using ruby gems you're a developer and should know the diff between an os package and language lib. And this is Hacker news. A "didn't happen to us"
by karmakaze 3y ago
If you're using ruby gems you're a developer and should know the diff between an os package and language lib. And this is Hacker news.
A "didn't happen to us" is noise because it could have happened for a different actor/target.
- jchw 3y agoEngineering managers and their managers are not all technical enough to know if RubyGems is vulnerable, but nonetheless are often technical enough to know that RubyGems is used by them. I'm not posing a hypothetical here, I've already seen management asking similar questions.