masukomi,
@masukomi@connectified.com avatar

Geeks um... We got problems! rubygems.org is now considered a dangerous site.

Anyone got some contacts at ? Firefox claims the warning is coming from Google Safe Browsing. https://developers.google.com/safe-browsing/v4/advisory

This happens in Firefox AND Chrome.

postmodern,
@postmodern@ruby.social avatar
masukomi,
@masukomi@connectified.com avatar

@postmodern Nice catch! Also 🙀!!!

masukomi,
@masukomi@connectified.com avatar

@postmodern Happy to report this is no longer an issue! Someone fixed it!

🎉

squarism,

@masukomi Seeing the same. Others saying the same in Slack. This happens occasionally, flagged by Google. I don't know what the time period is for it to clear.

If you click-through, it's the normal site. I'm not saying to do (or not to do) this. Your call.

masukomi,
@masukomi@connectified.com avatar

@squarism yeah. I don't actually care about the web page too much and I'm not afraid to click through because i'm more inclined to believe that google is being idiotic, BUT it's impacting my ability to install gems too. I don't understand how / why but if i switch to the IP address it works fine. 🤷‍♀️

squarism,

@masukomi It shouldn't impact gem install (but I guess it would impact looking up names)

It's back to normal today.

masukomi,
@masukomi@connectified.com avatar

@squarism yup, they removed it from the list of bad sites.

it shouldn't impact gem install and yet I was able to gem install before it became bad, but i wasn’t able to after it became bad, and when it stopped being marked bad I could install again.

I suspect that my ISP (comcast) may have been doing something related to it. Switching my gem source their ip address worked, which implies it wasn't anything on rubygems.org 's server that was the problem.

🤷‍♀️

masukomi,
@masukomi@connectified.com avatar

this is effecting bundle install too (not sure how)

IF you need a temporary workaround, do this in your Gemfile. (the ip is just copy-pasted from what I got when running ping rubygems.org

(don't trust what i show below. i might be a bad person trying to trick you into downloading hacked gems. ;) confirm the ip for yourself )

# source '<https://rubygems.org>'  
source 'http://151.101.65.227'  
greg,
@greg@aus.social avatar

@masukomi Looks normal and fine for me when I visit. Maybe DNS or routing is sending you to a hacked version?

nxadm,

@greg @masukomi

I see the warning (through a .be ISP)

masukomi,
@masukomi@connectified.com avatar

@nxadm @greg what IP are you two getting?

here's what i get.

❯ ping rubygems.org
PING rubygems.org (151.101.65.227): 56 data bytes

nxadm,

deleted_by_author

  • Loading...
  • masukomi,
    @masukomi@connectified.com avatar

    @nxadm @greg that matches what i'm seeing.

    masukomi,
    @masukomi@connectified.com avatar

    @nxadm @greg works in safari... I dunno if that's good or bad...leaning towards bad.

    nxadm,

    deleted_by_author

  • Loading...
  • masukomi,
    @masukomi@connectified.com avatar

    @nxadm I'm running Chrome Version 113.0.5672.92 (Official Build) (arm64)

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • tacticalgear
  • thenastyranch
  • ethstaker
  • everett
  • Durango
  • rosin
  • InstantRegret
  • DreamBathrooms
  • magazineikmin
  • Youngstown
  • mdbf
  • slotface
  • GTA5RPClips
  • kavyap
  • megavids
  • modclub
  • cisconetworking
  • cubers
  • ngwrru68w68
  • khanakhh
  • tester
  • anitta
  • normalnudes
  • Leos
  • osvaldo12
  • provamag3
  • JUstTest
  • lostlight
  • All magazines