4 ms·
>an entire type of previously very-promising attack is completely burned. I fear it's not just the attack that is burned. If new contributors have to be distru
by fauigerzigerk 3y ago
>an entire type of previously very-promising attack is completely burned.
I fear it's not just the attack that is burned. If new contributors have to be distrusted and/or go through some sort of vetting that isn't based on the merit of their contributions, that is a terrible blow to the entire open source movement.
The threshold for young coders without a great deal of history and without a network of contacts to become contributors to important open source projects has just gone up massively.
- Brian_K_White 3y agoNah. Hardly going to change anything for the worse, only for the better. The bar is still trivial. The worst part is that it will be difficult to be anonymous. There are a lot of valid, even life & death reasons for anonymity, and that will now be much harder. So the loss is all the contributors who don't dare let their government or employer see them helping the wrong projects, or in some cases don't want to disclose that they are any good at coding or particularly interested in security etc.
- cqqxo4zV46cp 3y ago“GitHub Verified”.
- nonrandomstring 3y ago[dead]
- bradleyjg 3y agoI bet a bunch of employers don’t want any unauthorized contributions to open source. For governments it seems much more niche—-only a few specific projects would raise red flags.
- tw04 3y agoThe average business still isn’t going to have any clue who GitHub user coderdude57 is in real life. But coderdude57 may be forced to hop on a video meeting to prove who he is to a project lead before his code is accepted.