Lightnews — Scholar-powered news

Xavier Noria @fxn.bsky.social · 1h

In my signatures, the return type for predicates was Object!

Xavier Noria @fxn.bsky.social · 1h

My point is that, idiomatically, that would be `bool`.

The name does not formally restrict the interface, it is what it means, right?

Xavier Noria @fxn.bsky.social · 1h

So if you are told `bool` and that means `top` you know you cannot assume much and the object is mean to be used in boolean contexts.

1 1

Xavier Noria @fxn.bsky.social · 1h

you can discuss that with Matz :)

While Ruby is the way it is, all objects are booleans and official stuff should match Ruby senantics

1 1

Xavier Noria @fxn.bsky.social · 1h

Not really, in Ruby `nil` and `false` are both as false.

We could also have 0, empty strings, etc. only we don't.

Xavier Noria @fxn.bsky.social · 2h

Links:

Wiki: github.com/ruby/rbs/wik...

Spec: github.com/ruby/rbs/blo...

Xavier Noria @fxn.bsky.social · 2h

I dislike the -ishms because they diminish Ruby semantics.

The symbol `:foo` is not kind-of-true or truish, it *is* true. It is as true as `true`.

And I am not into bending POLS to mean "least surprising to people coming from Java". You do not design a language to accommodate foreign expectations.

4 3

Xavier Noria @fxn.bsky.social · 2h

RBS has changed its mind wrt booleans.

The wiki says `bool` is like `top`, since all objects are booleans. Use the union type `true | false` otherwise. And recommends the former as preferable choice. This is the Ruby way.

But the spec defines `bool` and `boolish`. Man, I dislike the -ishms.

Object.new

1 1 6

Xavier Noria @fxn.bsky.social · 15h

According to the newly shared email, on Sept 18 he was clearly not working for RC anymore.

We have to conclude the password change, okus lack of communication, and all days that lasted are just unnacceptable.

3

Xavier Noria @fxn.bsky.social · 20h

Media Quality settings!

Xavier Noria @fxn.bsky.social · 23h

"The team of former RubyGems maintainers"

I am seeing this universal quantifier repeated or implied in all this conversation, but I don't think that is correct. Isn't it a subset of them?

1 3

Reposted by Xavier Noria

Rachael Wright-Munn @chaelcodes.bsky.social · 23h

Arko told Socket, “I have requested Ruby Central stop claiming to own or create ‘bundler’, although they are welcome to modify the source code and share it under some other name. Ruby Central has replied only to ask for time to review my request with their legal counsel.”

socket.dev/blog/gem-coo...

3 1 3

Reposted by Xavier Noria

Rachael Wright-Munn @chaelcodes.bsky.social · 1d

Maybe from when he trademarked Bundler?
andre.arko.net/2025/09/25/b...
Elsewhere he said that he's asked them to stop distributing Bundler, and they'd asked to review it with their legal team. I can't find that quote though.

2 1 7

Xavier Noria @fxn.bsky.social · 1d

3

Xavier Noria @fxn.bsky.social · 1d

On the topic of music streaming, Spotify added a lossless setting recently (😱 finally!), but it is only up to 44.1 kHz.

1 2

Xavier Noria @fxn.bsky.social · 1d

It's not even clear if by then he was actually on call or had any paid duty.

And perhaps it was all so messy that you could not tell, or you could tell but with a suspicion that something could be very wrong.

I don't know.

2 4

Reposted by Xavier Noria

Konstantin Haase @rkh.cool · 1d

Yes, according to that post the password change was in order to lock down the account. Which makes sense, in a way. My interpretation based on public statements would be that André failed to properly disclose it to RC (and from their perspective shouldn’t have accessed the account at all).

1 1 4

Xavier Noria @fxn.bsky.social · 1d

I RTed RC's post yesterday.

For fairness, I have to share the reply too: andre.arko.net/2025/10/09/t...

The RubyGems “security incident”

Ruby Central posted an extremely concerning “Incident Response Timeline” today, in which they make a number of exaggerated or purely misleading claims. Here’s my effort to set the record straight. Fir...

andre.arko.net

10

Reposted by Xavier Noria

Brad Gessler @bradgessler.com · 1d

I don’t know anybody who is jumping to conclusions. Most conversations I’ve been involved in or read about are people asking questions trying to understand what happened.

The only conclusions I’ve seen are that RC is terrible at communications and it’s starting to look like they’re bad at OpSec.

1 13

Xavier Noria @fxn.bsky.social · 1d

There's andre.arko.net/2025/10/09/t...

The RubyGems “security incident”

Ruby Central posted an extremely concerning “Incident Response Timeline” today, in which they make a number of exaggerated or purely misleading claims. Here’s my effort to set the record straight. Fir...

andre.arko.net

1 3

Xavier Noria @fxn.bsky.social · 1d

I would be surprised if that wording is ment to cover "selling".

These texts are not expressed in first-order logic and we have to take into account this is RC.

1 1

Xavier Noria @fxn.bsky.social · 1d

Policies permit selling private info?

1

Xavier Noria @fxn.bsky.social · 1d

I miss this kind of details in the posts by affected people.

3

Reposted by Xavier Noria

Ruby Central @rubycentral.org · 1d

Here’s a note from our Executive Director regarding our recent security incident.
rubycentral.org/news/rubygem...

Rubygems.org AWS Root Access Event – September 2025

As part of standard incident-response practice, Ruby Central is publishing the following post-incident review to the public. This document summarizes the September 2025 AWS root-access event, what…

rubycentral.org

12 19

Xavier Noria @fxn.bsky.social · 1d

Is that bass technique exploiting that harmonics may trick your mind to listen low frequencies even if they are not being produced for real?

1