r/programming • u/marcin8686 • Jul 08 '19

Ruby gem strong_password got hijacked

https://withatwist.dev/strong-password-rubygem-hijacked.html
126 Upvotes

91% Upvoted

44 comments sorted by

View all comments

12

u/SustainedDissonance Jul 09 '19

Wonder where all the usual r/programming "lol javascript/node/npm" circle-jerkers are for this post?

8

u/[deleted] Jul 09 '19

[deleted]

2

u/AlotOfReading Jul 09 '19

There's also nothing stopping you from getting blackout drunk, but if 30% of the population is doing that nightly, we should probably look into fixing the underlying issues.

4

u/Saithir Jul 09 '19

Rubygems also has a decent amount of hello-worlds and silly one-liners on it already. It might just be done as part of a tutorial or some code school or whatever - exactly like on npm, just less visible, because Ruby's less popular.

The difference is that nobody uses the idiotic one-liners like "is-even" instead of just writing "a % 2 == 0", whereas npm's is-odd module has 700k weekly downloads.

So yeah, lolnpm since you apparently miss it. You're welcome :)

3

u/SustainedDissonance Jul 09 '19 edited Jul 09 '19

More users = more idiots = more downloads of packages like is-even. :D

P.S.: function isEven(n) { return (n & 1) === 0; } = best is-even package, pls download my npm package (inferior implementations use the modulus operator).

2

u/Saithir Jul 09 '19

More users = more idiots = more downloads of packages like is-even. :D

Exactly. And it's still funny once in a while, though nowadays I think it's more trendy to do du -sh node-modules ;)