I can't comment on any authenticity. Others here apparently dispute Andre's version, who clearly says he was
on call:
"As this situation occurred, I was the primary on-call. My contractual, paid responsibility to Ruby Central was to defend the RubyGems.org service against potential threats."
