4 ms·

I have used emails in the past I can no longer verify, so I see a use case for linking unverified emails to profiles if there's only one profile claiming the em

I have used emails in the past I can no longer verify, so I see a use case for linking unverified emails to profiles if there's only one profile claiming the email address However, if another profile verified that email address, it definitely shouldn't link to another profile that hasn't verified

bluGill 5y ago
That isn't fair either though. I can see the ISP I quit using 15 years ago letting someone else have my old email address, but now they can claim to be me. I don't know how to handle this situation. It is somewhat easy to verify that a commit today comes from an email address I control now. However if I claim an unverified commit from years back is it really me just because I now control that email?
- totony 5y ago
  What does it matter if someone can claim your commits? Doesn't seem important imo.
  - hyperhopper 5y ago
    Since [by default] you own the IP for code you commit, this is effectively claiming to steal intellectual property. Also professional credit and fame, which can directly relate to employment opportunities.
    - totony 5y ago
      AFAICT they can only claim it because you haven't claimed it so >which can directly relate to employment opportunities. doesn't seem right. Agreed on the copyright part of the equation, but I don't think many people take the commit author on GitHub as the copyright owner.
    - krageon 5y ago
      > intellectual property This seems to me to be the least important aspect of whatever is happening. > can directly relate to employment opportunities Given how free we are in choosing work, it seems to me you could just go work for a workplace that doesn't trawl through your charity history to figure out you're worthy enough. That's a matter of self-respect, which you should absolutely have.
      - bluGill 5y ago
        Given few programmers have open source work on their résumé that doesn't really matter, more just pride.
- flippinburgers 5y ago
  Sign your commits.
  - bluGill 5y ago
    That is the right answer, but it means 15 years ago you need to have done the right thing, and also means not losing the private key (which should have expired) in the mean time.

bluGill 5y ago

That isn't fair either though. I can see the ISP I quit using 15 years ago letting someone else have my old email address, but now they can claim to be me. I don't know how to handle this situation. It is somewhat easy to verify that a commit today comes from an email address I control now. However if I claim an unverified commit from years back is it really me just because I now control that email?

totony 5y ago
What does it matter if someone can claim your commits? Doesn't seem important imo.
- hyperhopper 5y ago
  Since [by default] you own the IP for code you commit, this is effectively claiming to steal intellectual property. Also professional credit and fame, which can directly relate to employment opportunities.
  - totony 5y ago
    AFAICT they can only claim it because you haven't claimed it so >which can directly relate to employment opportunities. doesn't seem right. Agreed on the copyright part of the equation, but I don't think many people take the commit author on GitHub as the copyright owner.
  - krageon 5y ago
    > intellectual property This seems to me to be the least important aspect of whatever is happening. > can directly relate to employment opportunities Given how free we are in choosing work, it seems to me you could just go work for a workplace that doesn't trawl through your charity history to figure out you're worthy enough. That's a matter of self-respect, which you should absolutely have.
    - bluGill 5y ago
      Given few programmers have open source work on their résumé that doesn't really matter, more just pride.
flippinburgers 5y ago
Sign your commits.
- bluGill 5y ago
  That is the right answer, but it means 15 years ago you need to have done the right thing, and also means not losing the private key (which should have expired) in the mean time.