Protecting rubygems.org from the outside in: DoS prevention and compromised passwords

Every gem published to rubygems.org ends up running on someone’s computer. It’s up to rubygems.org to ensure that each gem contains what it claims, that its metadata is well-formed, and that the person who pushed it is who they say they are. We’ve been chipping away at that.