4 ms·

Github accounts of both xz maintainers have been suspended.

miduil 3y ago
Not true, the original author wasn't suspended: https://github.com/Larhzu https://github.com/Larhzu https://github.com/JiaT75 https://github.com/JiaT75 was suspended for a moment, but isn't anymore?
- boutique 3y ago
  Both are suspended for me. Check followers on both accounts, both have a suspended pill right next to their names.
  - miduil 3y ago
    Ah, thanks for correcting me there - really weird that this isn't visible from the profile itself. Not even from the organization. The following page for each other show both accounts suspended indeed. https://github.com/Larhzu?tab=following https://github.com/Larhzu?tab=following https://github.com/JiaT75?tab=following https://github.com/JiaT75?tab=following
    - miduil 2y ago
      Lasse's account was restored
  - fargle 3y ago
    github should add a badge for "inject backdoor into core open source infrastructure"
    - account42 2y ago
      Hey maybe it would get bad actors to come clean trying to get that badge.
- FridgeSeal 3y ago
  GitHub’s UI has been getting notoriously bad for showing consistent and timely information lately, could be an issue stemming from that.
  - justinclift 3y ago
    Yeah. Had a weird problem last week where GitHub was serving old source code from the raw url when using curl, but showing the latest source when coming from a browser. Super frustrating when trying to develop automation. :(
logicziller 3y ago
These shouldn't be suspended, and neither should their repositories. People might want to dig through the source code. It's okay if they add a warning on the repository, but suspending _everything_ is a stupid thing to do.
- account42 2y ago
  Tools don't read warnings. Of course the information should not be hidden completely but intentionally breaking the download URLs makes sense.
  - logicziller 2y ago
    This can also be handled relatively easily. They can disable the old links and a new one can be added specifically for the disabled repository. Or even just let the repository be browsable through the interface at least. Simply showing one giant page saying "This respository is disabled" is not helpful in any way.

Not true, the original author wasn't suspended: https://github.com/Larhzu https://github.com/Larhzu https://github.com/JiaT75 https://github.com/JiaT75 was suspended for a moment, but isn't anymore?

boutique 3y ago
Both are suspended for me. Check followers on both accounts, both have a suspended pill right next to their names.
- miduil 3y ago
  Ah, thanks for correcting me there - really weird that this isn't visible from the profile itself. Not even from the organization. The following page for each other show both accounts suspended indeed. https://github.com/Larhzu?tab=following https://github.com/Larhzu?tab=following https://github.com/JiaT75?tab=following https://github.com/JiaT75?tab=following
  - miduil 2y ago
    Lasse's account was restored
- fargle 3y ago
  github should add a badge for "inject backdoor into core open source infrastructure"
  - account42 2y ago
    Hey maybe it would get bad actors to come clean trying to get that badge.
FridgeSeal 3y ago
GitHub’s UI has been getting notoriously bad for showing consistent and timely information lately, could be an issue stemming from that.
- justinclift 3y ago
  Yeah. Had a weird problem last week where GitHub was serving old source code from the raw url when using curl, but showing the latest source when coming from a browser. Super frustrating when trying to develop automation. :(

logicziller 3y ago

These shouldn't be suspended, and neither should their repositories. People might want to dig through the source code. It's okay if they add a warning on the repository, but suspending _everything_ is a stupid thing to do.

account42 2y ago
Tools don't read warnings. Of course the information should not be hidden completely but intentionally breaking the download URLs makes sense.
- logicziller 2y ago
  This can also be handled relatively easily. They can disable the old links and a new one can be added specifically for the disabled repository. Or even just let the repository be browsable through the interface at least. Simply showing one giant page saying "This respository is disabled" is not helpful in any way.