6 ms·

> Github's terms of service must have somewhere detailed description about it. Please, point me to the part where bugs, intentional or not, are disallowed. Ta

by pmlnr 5y ago

> Github's terms of service must have somewhere detailed description about it. Please, point me to the part where bugs, intentional or not, are disallowed. Taking over someone's account is not justified; for this, definitely, but I'd say it's never is. Block the account yes; take over, no.

fernandotakai 5y ago
https://docs.github.com/en/github/site-policy/github-terms-of-service#3-github-may-terminate https://docs.github.com/en/github/site-policy/github-terms-o... >GitHub has the right to suspend or terminate your access to all or any part of the Website at any time, with or without cause, with or without notice, effective immediately. GitHub reserves the right to refuse service to anyone for any reason at any time. github owns your account -- if the github company thinks they should terminate your account, they will.
- pmlnr 5y ago
  terminate, yes. Ban, yes. Take over the account? No, not even by their own terms.
  - fault1 5y ago
    It appears that all they (github) did is rollback the npm revision so that it pointed at a version that didn't break semvar: https://www.npmjs.com/package/colors?activeTab=versions https://www.npmjs.com/package/colors?activeTab=versions note that they didn't do that to faker, since it had a major revision: https://www.npmjs.com/package/faker?activeTab=versions https://www.npmjs.com/package/faker?activeTab=versions I'm not very familiar with npm/js, but isn't this policy since left-pad?
- throw_m239339 5y ago
  Microsoft owns Github... and NPM.
viro 5y ago
the fact that this is literally a criminal act. he pushed code KNOWING it would crash every server that pulled it. Its NOT a bug, its malware.
- pmlnr 5y ago
  Lol. No. It is not "criminal act".
  - viro 5y ago
    You think pushing malware in a fake app update isn't criminal?
    - pmlnr 5y ago
      He pushed to his own repo. You can push any code to your own repo.
mirekrusin 5y ago
You are conflating bugs with malicious code. If somebody decides to deliberately create harm, intentions are very clear, there is no point in playing stupid to turn it around into a bug, it doesn't work in courts, it won't work here either. There should be no place for this kind of immature behaviour in github/npm communities. Account suspension and reversal of harmful actions feels like adequate steps taken to protect everybody.

by pmlnr 5y ago

fernandotakai 5y ago

https://docs.github.com/en/github/site-policy/github-terms-of-service#3-github-may-terminate https://docs.github.com/en/github/site-policy/github-terms-o... >GitHub has the right to suspend or terminate your access to all or any part of the Website at any time, with or without cause, with or without notice, effective immediately. GitHub reserves the right to refuse service to anyone for any reason at any time. github owns your account -- if the github company thinks they should terminate your account, they will.

pmlnr 5y ago
terminate, yes. Ban, yes. Take over the account? No, not even by their own terms.
- fault1 5y ago
  It appears that all they (github) did is rollback the npm revision so that it pointed at a version that didn't break semvar: https://www.npmjs.com/package/colors?activeTab=versions https://www.npmjs.com/package/colors?activeTab=versions note that they didn't do that to faker, since it had a major revision: https://www.npmjs.com/package/faker?activeTab=versions https://www.npmjs.com/package/faker?activeTab=versions I'm not very familiar with npm/js, but isn't this policy since left-pad?
throw_m239339 5y ago
Microsoft owns Github... and NPM.

viro 5y ago

the fact that this is literally a criminal act. he pushed code KNOWING it would crash every server that pulled it. Its NOT a bug, its malware.

pmlnr 5y ago
Lol. No. It is not "criminal act".
- viro 5y ago
  You think pushing malware in a fake app update isn't criminal?
  - pmlnr 5y ago
    He pushed to his own repo. You can push any code to your own repo.

mirekrusin 5y ago

You are conflating bugs with malicious code. If somebody decides to deliberately create harm, intentions are very clear, there is no point in playing stupid to turn it around into a bug, it doesn't work in courts, it won't work here either. There should be no place for this kind of immature behaviour in github/npm communities. Account suspension and reversal of harmful actions feels like adequate steps taken to protect everybody.