Hacker News Reader

I think what they're trying to say is that the bug is exactly as bad as the Rubygems incident, but they got lucky and it wasn't exploited.

How I took it as well.

That was certainly the intention.