3 ms·

English is not formal logic. In formal logic, that statement is true whether X is GitHub, or Lockheed-Martin, Safeway, or the local hardware store. In English

English is not formal logic. In formal logic, that statement is true whether X is GitHub, or Lockheed-Martin, Safeway, or the local hardware store. In English, the statement serves to inform (or remind) you that GitHub has a secret scanning program that many providers actually do partner with.

pwdisswordfishy 8mo ago
Yes, and in the real world where Grice's Maxim of Relevance is in force, then when the secrets issuer that is the subject of the discussion isn't one of those partners, then an informative "reminder" that GitHub "has a secret scanning program" with a bunch of other partners is not actually informative. It's as superfluous and unhelpful as calling to let someone know you're not interested in the item they've posted for sale on Craiglist (<https://www.youtube.com/watch?v=xWG3jKzKcm8 https://www.youtube.com/watch?v=xWG3jKzKcm8>).
- richbell 8mo ago
  How is reminding people that they can safely revoke exposed API keys not informative? Why are you being so combative?
  - pwdisswordfishy 8mo ago
    Because "This has to be one of the dumbest, most reckless threads to have been posted (and so vociferously defended) on HN." https://news.ycombinator.com/item?id=47419913 https://news.ycombinator.com/item?id=47419913
- wat10000 8mo ago
  It's more useful than telling someone that their statement is a tautology in formal logic.
  - pwdisswordfishy 8mo ago
    No it's not.
    - wat10000 8mo ago
      Yes it is. Reminding somebody of this feature is useful to somebody, even if it's not completely relevant to the topic being discussed. Calling out a supposed tautology is the opposite of useful: it helps nobody and just clutters things up.
      - pwdisswordfishy 8mo ago
        > Reminding somebody of this feature is useful to somebody, even if it's not completely relevant to the topic being discussed. Yeah, it's especially useful in that case. Useful to attackers, because someone "helpfully" showed up with "reminder" that reads like a suggestion to post these specific secrets (or any other Algolia secrets that other HNers might have come across) in the open out of some misguided belief that doing so will invalidate them. This has to be one of the dumbest, most reckless threads to have been posted (and so vociferously defended) on HN.

pwdisswordfishy 8mo ago

Yes, and in the real world where Grice's Maxim of Relevance is in force, then when the secrets issuer that is the subject of the discussion isn't one of those partners, then an informative "reminder" that GitHub "has a secret scanning program" with a bunch of other partners is not actually informative. It's as superfluous and unhelpful as calling to let someone know you're not interested in the item they've posted for sale on Craiglist (<https://www.youtube.com/watch?v=xWG3jKzKcm8 https://www.youtube.com/watch?v=xWG3jKzKcm8>).

richbell 8mo ago
How is reminding people that they can safely revoke exposed API keys not informative? Why are you being so combative?
- pwdisswordfishy 8mo ago
  Because "This has to be one of the dumbest, most reckless threads to have been posted (and so vociferously defended) on HN." https://news.ycombinator.com/item?id=47419913 https://news.ycombinator.com/item?id=47419913
wat10000 8mo ago
It's more useful than telling someone that their statement is a tautology in formal logic.
- pwdisswordfishy 8mo ago
  No it's not.
  - wat10000 8mo ago
    Yes it is. Reminding somebody of this feature is useful to somebody, even if it's not completely relevant to the topic being discussed. Calling out a supposed tautology is the opposite of useful: it helps nobody and just clutters things up.
    - pwdisswordfishy 8mo ago
      > Reminding somebody of this feature is useful to somebody, even if it's not completely relevant to the topic being discussed. Yeah, it's especially useful in that case. Useful to attackers, because someone "helpfully" showed up with "reminder" that reads like a suggestion to post these specific secrets (or any other Algolia secrets that other HNers might have come across) in the open out of some misguided belief that doing so will invalidate them. This has to be one of the dumbest, most reckless threads to have been posted (and so vociferously defended) on HN.