8 ms·

> I was banned from the Go issue tracker for mysterious reasons, so I cannot continue to nag them for a fix.¹ I can’t blackhole their IP addresses, because that

> I was banned from the Go issue tracker for mysterious reasons, so I cannot continue to nag them for a fix.¹ I can’t blackhole their IP addresses, because that would make all Go modules hosted on git.sr.ht stop working for default Go configurations (i.e. without GOPROXY=direct). I tried to advocate for Linux distros to patch out GOPROXY by default, citing privacy reasons, but I was unsuccessful. I have no further recourse but to tolerate having our little-fish service DoS’d by a 1.38 trillion dollar company. But I will say that if I was in their position, and my service was mistakenly sending an excessive amount of traffic to someone else, I would make it my first priority to fix it. But I suppose no one will get promoted for prioritizing that at Google. > [1]: In violation of Go’s own Code of Conduct, by the way, which requires that participants are notified moderator actions against them and given the opportunity to appeal. I happen to be well versed in Go’s CoC given that I was banned once before without notice — a ban which was later overturned on the grounds that the moderator was wrong in the first place. Great community, guys.

deleted 4y ago
[deleted]
deleted 4y ago
[deleted]
FiloSottile 4y ago
> In the meantime, if you would prefer, we can turn off all refresh traffic for your domain while we continue to improve this on our end. That would mean that the only traffic you would receive from us would be the result of a request directly from a user. This may impact the freshness of your domain's data which users receive from our servers, since we need to have some caching on our end to prevent too frequent fetches. https://github.com/golang/go/issues/44577#issuecomment-856928441 https://github.com/golang/go/issues/44577#issuecomment-85692... > "EFAIL" is an alarmist puff piece written by morons to slander PGP and inflate their egos. [...] https://github.com/golang/go/issues/30141#issuecomment-464278183 https://github.com/golang/go/issues/30141#issuecomment-46427... Disclosure: I was on the Go team at Google until earlier this month. Dealing with DeVault's bad faith arguments is one of the few things I won't miss of that job.
- reidrac 4y ago
  So what is your opinion on the proxy behaviour then? I know is not like knowing what Google thinks about this, but I'm curious about how something like what is described in the post is allowed to happen.
  - striking 4y ago
    I would be surprised if their opinion differs from that of the first link they sent.
- cookiengineer 4y ago
  How are his arguments in bad faith if he is the one that gets DDoSed by your software for over a year, and still tries to be helpful? Not sure if you realize the absurdity of this, but he has to pay traffic and server costs. Like everyone else, except probably Google as it seems!? I mean, you didn't even consider implementing a simple fetch of an already cloned repository in your mirroring server code. So yeah, I'd argue that the bad faith part is actually justified.
  - rfoo 4y ago
    > and still tries to be helpful "Assuming everyone else have exactly same design choice and architecture as yourself, making suggestion on this ground and calling other people crazy because they can't implement what you suggest them to do" is not trying to be helpful. Well, or maybe I'm just frustrated reading his repeated "please keep a copy 'locally' somewhere and run git fetch". Just like how I'm frustrated arguing with him on HN about whether sending patch to mail list is better than GitHub pull request. Don't get me wrong, I understand this is a real Google-scale system v.s. individual code hosting website issue, I just don't see how his "please stop being Google and instead try my works-fine-on-one-box solution" take is helpful.
    - ocdtrekkie 4y ago
      Cloudflare manages to cache things and then serve them to lots of people, without having to request the same content 50 times an hour. Maybe Google should move some of their services over to a better content delivery platform? o.O This is a scenario where anyone who isn't a Googler can see that "being Google" is not a justification for bad engineering. Do better.
downsidesabound 4y ago
Guy’s public behavior is constantly abrasive, I’m honestly surprised at the minor following he has. Being right isn’t the only most important thing in the world, nor does it wash away all transgressions.

deleted 4y ago

[deleted]

deleted 4y ago

[deleted]

FiloSottile 4y ago

> In the meantime, if you would prefer, we can turn off all refresh traffic for your domain while we continue to improve this on our end. That would mean that the only traffic you would receive from us would be the result of a request directly from a user. This may impact the freshness of your domain's data which users receive from our servers, since we need to have some caching on our end to prevent too frequent fetches. https://github.com/golang/go/issues/44577#issuecomment-856928441 https://github.com/golang/go/issues/44577#issuecomment-85692... > "EFAIL" is an alarmist puff piece written by morons to slander PGP and inflate their egos. [...] https://github.com/golang/go/issues/30141#issuecomment-464278183 https://github.com/golang/go/issues/30141#issuecomment-46427... Disclosure: I was on the Go team at Google until earlier this month. Dealing with DeVault's bad faith arguments is one of the few things I won't miss of that job.

reidrac 4y ago
So what is your opinion on the proxy behaviour then? I know is not like knowing what Google thinks about this, but I'm curious about how something like what is described in the post is allowed to happen.
- striking 4y ago
  I would be surprised if their opinion differs from that of the first link they sent.
cookiengineer 4y ago
How are his arguments in bad faith if he is the one that gets DDoSed by your software for over a year, and still tries to be helpful? Not sure if you realize the absurdity of this, but he has to pay traffic and server costs. Like everyone else, except probably Google as it seems!? I mean, you didn't even consider implementing a simple fetch of an already cloned repository in your mirroring server code. So yeah, I'd argue that the bad faith part is actually justified.
- rfoo 4y ago
  > and still tries to be helpful "Assuming everyone else have exactly same design choice and architecture as yourself, making suggestion on this ground and calling other people crazy because they can't implement what you suggest them to do" is not trying to be helpful. Well, or maybe I'm just frustrated reading his repeated "please keep a copy 'locally' somewhere and run git fetch". Just like how I'm frustrated arguing with him on HN about whether sending patch to mail list is better than GitHub pull request. Don't get me wrong, I understand this is a real Google-scale system v.s. individual code hosting website issue, I just don't see how his "please stop being Google and instead try my works-fine-on-one-box solution" take is helpful.
  - ocdtrekkie 4y ago
    Cloudflare manages to cache things and then serve them to lots of people, without having to request the same content 50 times an hour. Maybe Google should move some of their services over to a better content delivery platform? o.O This is a scenario where anyone who isn't a Googler can see that "being Google" is not a justification for bad engineering. Do better.

downsidesabound 4y ago

Guy’s public behavior is constantly abrasive, I’m honestly surprised at the minor following he has. Being right isn’t the only most important thing in the world, nor does it wash away all transgressions.