Lightnews — Scholar-powered news

Rachael Wright-Munn

@chaelcodes.bsky.social

130 followers 84 following 200 posts

Software Engineer since 2012 | Live coding on Twitch since 2019 | open-source contributor | Programming Game Enthusiast | Featured in "One Dreamer" video game! ✨

Posts Media Videos Starter Packs

Pinned

Rachael Wright-Munn @chaelcodes.bsky.social · 19d

I've been iterating on "Play with your Code"! Programming games make programming fun through a joyful developer experience. We're going to explore practical tips for your day job inspired by programming games!

I'm very excited!

Please come see it!!✨

Irina Nazarova @inazarova.bsky.social · 19d

Friends, tickets for the San Francisco Ruby conference are on sale and available. Grab yours, and I’ll see you with 600 Ruby friends and dozens of Ruby startups to pave the bright future for Ruby and Rails together on November 19-21!
sfruby.com

2 4 8

Reposted by Rachael Wright-Munn

Jim Remsik @jremsikjr.bsky.social · 4h

At @xoruby.com Portland today with some old friends, new friends, and a whole lot more connection than is possible over Zoom.

We’re establishing a Return to Conference Policy.

A photo featuring Shane Becker taking a photo of the video camera display with Kayla Roepelle speaking on Open Telemetry.

2 3 9

Reposted by Rachael Wright-Munn

Marco Roth @marcoroth.dev · 5h

In the upcoming Herb v0.8.0 release, the Herb Linter will support a new `--fix` option to autocorrect offenses.

This isn’t dependent on the Herb Formatter and uses the `printer` architecture, so the Linter can fix only the offenses without touching anything else in the document!

Screenshot of a terminal showing Herb Linter output to shocase the new --fix option.

2 3 17

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

Is it new cities?? One of my friends in Phoenix was lamenting being unable to attend an event!

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

Looping back to you.

rubycentral.org/news/source-...

This was confirmed in the Q&A!

Source of Truth Update – Friday, October 10, 2025

Yesterday, we released our Security Incident Report, a comprehensive review of the September AWS root-access event. The report reflects both independent and internal analysis, outlining what occurred...

rubycentral.org

1 1

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

Thank you! I really appreciate that.

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

I think we need to hear from the members of gem.coop whether they knew about André's proposal to RC, if it was considered as a funding option for coop, and whether they would consider it in the future.

@martinemde.com said they are not currently collecting data, but I think we still need answers.

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

Thus far, you've been level-headed, empathetic, and transparent. I appreciate that.

I think it's important that users of gem.coop know:

- Were you aware of André's proposal to RC of selling PII associated with gem usage data?
- Did you know he talked to Mike Perham about buying it?

Reddit comment from mperham:

Andre has always been exploring ideas for sustaining rubygems maintenance and paying the team a fair wage. That was the ethos behind Ruby Together.

In this case I have first hand knowledge since he pitched me on the idea: would Sidekiq, being a big sponsor of Ruby Central in the past, be interested if rubygems could somehow use the remote IP to identify the companies downloading the `sidekiq` gem so I could use that to upsell those companies to Sidekiq Pro, i.e. send them a cold email? Lead generation tools are common and valuable to literally every company. I pay $1000/mo and get a set of leads every month. Seems reasonable.

I can see how your worst case scenarios might paint this in a bad light. We never discussed edge cases or privacy concerns as he was just spitballing this idea. That's as far as it got and you can see the same level of thought in his email they published. Hope that clarifies the intent.

Email from andre@arko.net, sent on Aug 3, 2025
Subject: Secondary on-call proposal

Hi Marty, here's a written up version of the proposal that I mentioned on Friday. Let me know what you think.

### In Brief

I'd like to offer Ruby Central a contract to cover secondary on-call in exchange for a copy of the gem download access logs.

### Background

Since Ruby Central has run out of funds for a secondary on-call, and maintenance budget has been so limited, I've been brainstorming options. Yesterday I met someone who has had some success building a system to analyze download logs from a package registry and using those kids to determine which companies are installing the packages. From our conversations, the market overall isn't enough to run a company and hire employees, but seems like it could cover the costs of paying for secondary on-call. If it's more successful than expected, I would be open to potentially using it to pay the costs of primary on-call as well.

I believe this is a win-win because Ruby Central will get secondary on-call coverage that it needs but currently can't afford, and my consultancy will have a project to build that could bring us revenue in the future while we are still getting set up and are low on client work.

### Detailed proposal

My consultancy would sign a contact with Ruby Central to provide secondary on-call coverage, with rotations and shifts coverage handled by us internally. We could offer to respond to escalated alerts (from the primary on-call to us as the secondary) within 30 minutes, any time of day or night. In exchange, we would receive access to a copy of the RubyGems.org HTTP access logs.

If we are successful at turning download logs into companies using packages and versions, we would be happy to report back what we're able to determine, and make an agreement to provide that information for future RubyGems.org paid organizations customers.

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

If you were project lead, and you received this proposal, how would you respond? And why?

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

Every time I ask who the maintainers were I get a different answer. Do you have any sort of governance, documentation, or team structure?

This is the closest and most recent thing I've found. It lists everyone from gem.coop (and more), but doesn't include HSBT.

rubycentral.org/news/ruby-ce...

Ruby Central's First Annual OSS Report (2024)

This is a web preview of Ruby Central's FIRST Annual OSS Report, for 2024, sharing everything we've been working on over the last 12 months and the impact of our work. We will be publishing a finalize...

rubycentral.org

1 3

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

Found it! It doesn't specifically reference his lawyer though, and thankfully the language is "own or create" and not "distribute".

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

Arko told Socket, “I have requested Ruby Central stop claiming to own or create ‘bundler’, although they are welcome to modify the source code and share it under some other name. Ruby Central has replied only to ask for time to review my request with their legal counsel.”

socket.dev/blog/gem-coo...

3 1 3

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

Maybe from when he trademarked Bundler?
andre.arko.net/2025/09/25/b...
Elsewhere he said that he's asked them to stop distributing Bundler, and they'd asked to review it with their legal team. I can't find that quote though.

2 1 7

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

What I'm hoping to get out of these first 2, and my future follow-up questions, is how Martin, as a prospective project lead for gem.coop views this proposal.

Did he know about it? Did he support it? How would he handle it if it was proppsed to him? Does he view it as PII?

1 2

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

Is it still just IP addresses if it ends up associated with a company name? But sure, we can call it CII, company-identifying information.

1 2

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

2 2

Reposted by Rachael Wright-Munn

Stan Lo @st0012.dev · 2d

Thank you for writing this, especially:

> Aaron got nerd sniped into making Bundler faster, and now he’s being called out for supposedly being part of a hostile takeover? Give me a break.

Jean Boussier @byroot.bsky.social · 2d

I tried to explain why I don't believe the recent accusations toward my former teammates, as well as how the Ruby and Rails Infra team at Shopify operates and why it can be trusted.

byroot.github.io/opensource/r...

Dear Rubyists: Shopify Isn’t Your Enemy

I’ve been meaning to write a post about my perspective on Open Source and corporate entities. I already got the rough outline of it; however, I’m suffering from writer’s block, but more importantly, t...

byroot.github.io

6 23

Rachael Wright-Munn @chaelcodes.bsky.social · 2d

How do you interpret it?

Rachael Wright-Munn @chaelcodes.bsky.social · 2d

Thank you for coming by and merging it! It was super fun! 🙌

Rachael Wright-Munn @chaelcodes.bsky.social · 2d

OMG. This is WILD.

That email? And stealing credentials? And they still tried to keep it professional with his departure.

Ruby Central @rubycentral.org · 2d

Here’s a note from our Executive Director regarding our recent security incident.
rubycentral.org/news/rubygem...

Rubygems.org AWS Root Access Event – September 2025

As part of standard incident-response practice, Ruby Central is publishing the following post-incident review to the public. This document summarizes the September 2025 AWS root-access event, what…

rubycentral.org

1 4

Rachael Wright-Munn @chaelcodes.bsky.social · 2d

During Hacktoberfest, I normally like to explore, push myself, and contribute to other people's projects.

Today on stream, we added a "Mutual Events" tab to a profile on RubyEvents.org, so you can see which events you and someone else are both attending!!

Super special thanks to @marcoroth.dev. ✨

1 3 9

Rachael Wright-Munn @chaelcodes.bsky.social · 2d

Guess what I did on stream today?? ❤️

RubyEvents @rubyevents.org · 2d

We now show a new "Mutual Events" tab when viewing an other person's @rubyevents.org profile!

Thanks to @chaelcodes.bsky.social for this great contribution!

1 5

Rachael Wright-Munn @chaelcodes.bsky.social · 2d

Thank you! I'm glad you like it! I'm looking forward to using it.

Rachael Wright-Munn @chaelcodes.bsky.social · 2d

They have this map.

Obviously I'm looking forward to getting my Ruby passport, and I'm sure the lounges will be interesting.

But what is this secret experience?

Map of SF Ruby Conference's venue.

There are food trucks. 2 theaters - Blackbox and Main Stage. 2 lounges - Zero Gravity and Spacesuits. A workshop studio. There's a Ruby Embassy room.

Then there's a room labeled "Secret Experience".

1 2

Rachael Wright-Munn @chaelcodes.bsky.social · 2d

Evil Martians delivers deep technical competency with this touch of delightful whimsy.

I cannot wait to see what a conference organized by them looks like!

The program is focused on the bleeding edge of Ruby, but I want to see the rest!

San Francisco Ruby Conference, Nov 19-21 @sfruby.com · 2d

This November in San Francisco... 💎❤️
Grab your tickets before October 20 at sfruby.com
youtu.be/m2P9PZwi8W4

The San Francisco Ruby Conference: join in at sfruby.com

YouTube video by Evil Martians

youtu.be

1 1 5

Rachael Wright-Munn @chaelcodes.bsky.social · 2d

I really want to go! For me, a lot of it is the community. I've got a friend, and some of my favorite Twitch chatters and rubyists are in Brazil.

I've been to a Ruby Retreat in NZ, but this would also be my first international conference!

I think I'll set an alarm for when the tickets drop.

Rachael Wright-Munn @chaelcodes.bsky.social · 3d

For the last several years, I've been trying to get a ticket to Tropical.rb!

But they always sell out so fast, before I can secure childcare, or I'm like super-pregnant.

This year though?? I'm getting a ticket. 🤞

Tropical on Rails @tropicalonrails.bsky.social · 3d

[ENG] 🎟️ It’s official!
Ticket sales for Tropical on Rails 2026 open on October 30th at 12pm(gmt-3)! 💎🌴 

[PT-BR] 🎟️ É oficial!
As vendas dos ingressos para o Tropical on Rails 2026 abrem no dia 30 de outubro as 12h! 💎🌴 

#TropicalOnRails #RubyOnRails

1 3