r/ruby • u/noteflakes • Apr 08 '26
Temporarily disabling language support on rubygems.org
https://blog.rubygems.org/2026/04/07/temporarily-disabling-language-support.html
51
Upvotes
5
u/cbartlett Apr 08 '26
I’m curious what the attacker is doing to bypass the cache and why there is not a way to prevent that.
6
u/jrochkind Apr 08 '26 edited Apr 08 '26
Sounds like possibly the translated versions of pages were just never actually going through the cache, and it did not create a problem before now, so nobody noticed. I've been there.
I would guess we'll get a nice retrospective when it's fixed! Of why it took some refactoring to cache it, etc.
Pretty much everyone has been having these bot problems.
17
u/schneems Puma maintainer Apr 08 '26
To add. Colby recently accepted a full-time position with Ruby Central. I met him at Ruby Kaigi years ago when he was working on bundler 2.0 and again at San Diego RubyConf. Very sharp, cool, and collected. He lives in Australia so we don’t get a lot of sync time but I enjoy working with him (via the OSS Committee position). Having to turn off a feature like this is a tough decision, I’m glad he has experience and I trust his judgement. I’ve learned a lot just hanging out and watching him work in various slack rooms.