3 ms·
They asked. They didn’t demand, and they seem prepared to accept whatever GitHub decides. If I were fielding that request, I’d certainly grant it—on the conditi
by eyelidlessness 3y ago
They asked. They didn’t demand, and they seem prepared to accept whatever GitHub decides. If I were fielding that request, I’d certainly grant it—on the condition that any deviation from the stated intent would indeed result in a ban—purely on the basis that it’s a ~free QA contribution and postmortem.
- Kwpolska 3y agoKeeping the repository, even as a public archive, would still require a lot of resources on GitHub's side. The only fair thing to do here would be to apologize and ask for the repo to be deleted.
- rafark 3y agoAnd could be seen as a reward or an encouragement for other people to abuse the service.
- eyelidlessness 3y agoThey already do incentivize white hat exploit efforts[1]. The author seems to have run afoul of one of their rules[2] by impacting other users, but I don’t think that impact could be knowable without trying. GitHub could trivially honor the request without changing the incentives or even taking any defensive implementation action, by specifically citing this experiment in the rules and maybe adding some more specific wording to the TOS. 1: https://bounty.github.com/ https://bounty.github.com/ 2: https://bounty.github.com/#rules https://bounty.github.com/#rules