About the Ruby Central Security Incident
· 7 min read
Recently, Ruby Central, the non-profit responsible for maintaining the RubyGems package manager, suffered a security incident where they temporarily lost control of their AWS account. They have since published a post-mortem of this event that is ostensibly aimed at putting their community's minds at ease. Unfortunately, it had the opposite effect on me, causing me to come away with more questions than answers.