4 ms·
Tea.xyz causes a flood of spam pull requests to open source projects
- gklitz 3y agoIf only git had a mechanism to verify contributors to a repository./s
- crotchfire 3y agoTitle needs to be corrected by appending "on github". Sourcehut users unaffected.
- politelemon 3y agoThat reminds me of hacktoberfest, it's not crypto related, but people were creating similarly pointless pull requests for t-shirts. https://joel.net/how-one-guy-ruined-hacktoberfest2020-drama https://joel.net/how-one-guy-ruined-hacktoberfest2020-drama https://news.ycombinator.com/item?id=31628342 https://news.ycombinator.com/item?id=31628342
- yifanl 3y agoTechnically speaking, it was always possible for random people to spam PRs to open source before, but it wasn't a problem until someone put the idea of it out there on a platform with even the most trivial reason (a dumb tshirt or a few cents worth of crypto). I expect there's going to be plenty of growing pains as people push for the democratization of everything.
- mikeodds 3y agoIn a very similar vein, a projected called Starknet recently airdropped tokens to early adopters/developers/supporters, the claim process for developers was tied to the GitHub names. Two issues arose: - GitHub names can change, this lead to race to squat names that had rights to the airdrop for any since changed names - it’s incentivised those who are “farming” airdrops, ie creating multiple personas/wallets in an attempt to get larger allocations, to now add making low value pull requests to GitHub projects
- jenadine 3y agoAlso discussed a few days ago in https://news.ycombinator.com/item?id=39510756 https://news.ycombinator.com/item?id=39510756 (78 comments) and https://news.ycombinator.com/item?id=39529980 https://news.ycombinator.com/item?id=39529980 (15 comments)
- pushedx 3y agoThis response from one of the Tea developers seems disingenuous https://github.com/TryGhost/Ghost/pull/19743#issuecomment-1962428753 https://github.com/TryGhost/Ghost/pull/19743#issuecomment-19... How could they not have predicted this outcome?
- pastage 3y agoIncompetance, and a need to promote yourself. When you want to execute on something the people who are moderately successful just execute and do not think. Thinking means you will do less stuff and that lowers your productivity.
- dewey 3y agoAnd by "one of the tea developers" you mean a core contributor and the guy who build the Homebrew package manager. Which makes it even weirder as he, being a popular open source maintainer, should be aware of how annoying spam PRs can be.
- Timwi 3y agoIt doesn't read disingenuous to me, it's just wildly out of touch.
- mikl 3y agoYeah, after everything we’ve seen with crypto, where there are always grifters lining up around the block to exploit everything, mxcl should really have seen this coming.
- danirod 3y agoUh, can't believe it's this person again. He was involved also a couple of days ago in another GitHub drama related to AI with another project he manages. https://news.ycombinator.com/item?id=39499734 https://news.ycombinator.com/item?id=39499734
- marvel_boy 3y ago"This why people hate on crypto" Exactly
- urbandw311er 3y agoI mean, yes, but this is a bit like saying “this is why people hate on money” It’s essentially a problem with capitalism or the easy exchange of any kind of value.
- mort96 3y agoMan people who complain about cryptocurrencies need to stop calling it "crypto". Crypto is cryptography. People who evangelize cryptocurrencies won't stop calling it "crypto", but the rest of us shouldn't just give that word to them.
- gklitz 3y ago> Crypto is cryptography No. And astrology isn’t astronomy. And cryptography isn’t crypto. Cryptography is a legitimate field of science, crypto is not.
- mort96 3y agoThe word "crypto" means cryptography. Always has. The scam currencies are called cryptocurrencies, not "crypto".
- SuchAnonMuchWow 3y agoWait til you learn what "web 3" meant before cryptoscams started to also use this term.
- t-writescode 3y agoI don't remember accurately. What did Web3 mean prior to cyptoscams?
- thecosmicfrog 3y agoThe Semantic Web: https://en.wikipedia.org/wiki/Semantic_Web?wprov=sfla1 https://en.wikipedia.org/wiki/Semantic_Web?wprov=sfla1
- dhaavi 3y agoI feel you, but, sadly, I came to the conclusion that this war is lost. If I speak to an audience I want them to understand exactly what I mean. So, I only use "cryptography" and "cryptocurrency" explicitly.
- yrro 3y agoA blocked xyz. in my DNS server configuration the day I learned about it and have yet to be pro en wrong.
- BerislavLopac 3y agoGeocode.xyz [0] is quite a useful service. [0] https://geocode.xyz/ https://geocode.xyz/
- ivanjermakov 3y agoWith recent PR DoS attacks, GitHub and other git hosts should provide more tools for issue and PR moderation, e.g. allow maintainers to set conditions that have to be met in order to create issue/PR. Account age, blacklisted files, etc. Otherwise OSS development could literally halt because of how cluttered issue/PR management gets.
- w0de0 3y agoThe two filters you mention could likely be implemented by anyone with reusable Github Actions workflows.
- ChrisArchitect 3y ago[Dupe] More discussion: https://news.ycombinator.com/item?id=39510756 https://news.ycombinator.com/item?id=39510756