Open Source Software Community - it's about ethics in Code of Conducts

  • Want to keep track of this thread?
    Accounts can bookmark posts, watch threads for updates, and jump back to where you stopped reading.
    Create account
is there some sort of federated git service where projects can host themselves on their own servers but share accounts between servers? The owner of the host has full control over the project and can add or revoke authority to other users and servers?
There's something based on ActivityPub called ForgeFed, but it's work in progress. Forgejo (a Gitea fork) will likely be the first to implement it.

For now the best option still is using Git with email.
 
Apparently there's drama brewing in the open source hardware world. Sparkfun and Adafruit have parted ways:

Due to recent activities that are in direct violation of our Code of Conduct, which is publicly available on our website, SparkFun has determined that it can no longer transact with Adafruit Industries. Please see the official communication we sent to Adafruit below. Without oversharing, recent violations include:
  • Sending and forwarding offensive, antagonistic, and derogatory emails and material to SparkFun employees, former employees and customers
  • Inappropriately involving a SparkFun customer with a private matter
We understand this may be frustrating. From time to time, we have to make difficult business decisions and this decision was made after thoughtful consideration. We wish Adafruit the best in future endeavors. Please note, SparkFun continues to embrace our strong reseller network - for SparkFun-original products, Teensy, and a multitude of other products. Please see our distributor map below.

Since this is supposedly over a "code of conduct violation" one has to assume there is faggotry involved.

Digging just slightly, we see that yes indeed, we have accusations of "misgendering/dead-naming":

The first public claim is that you engaged in targeted social-media harassment of an individual ('discatte') [1], linking various personally-identifiable information to their public profile without consent (name, email and gmail profile pic), and further intentionally misgendering/dead-naming them after being made aware that this was harmful. Do you have any sort of public response to these claims, denying or apologizing for this behavior?

It's all so vague I can't really make much sense out of the various accusations. I don't really see the point of making such a big dramatic announcement if you won't provide some details. Just stop selling their stuff and get on with your life.
 
This seems to be from the Mastodon of the aggrieved maybefurry troon:
1768434427782.png
This doesn't seem brand new, that's interesting. (So old it was already archived!)
 
Did anyone post this? Gentoo moves off of github because "fuck AI", from the new year's report (archive)

That's great. I can't stand Github and it's one of the big reasons I don't contribute to more projects. Codeberg has their own issues (they took down the original Wikiless privacy frontend due to a request from Wikipedia) but I would still prefer to contribute via MRs there than Microsoft Github.

but since Sourcehut's design is all about muh minimalisums and its the brainchild of our good friend Drew "Nigger" DeVault, Codeberg seems like the best general purpose option. As far as the GnuPG thing goes,

He's NOT Drew Nigger DeVault. He's Drew/Pedophile+Loliphile DeVault! A Nigger is just a nigger, but Drew-the-Pedo wants to force teenage girls to get IUDs, probably so his can watch his tranny rape them while watching from the cuck-chair.

is there some sort of federated git service where projects can host themselves on their own servers but share accounts between servers? The owner of the host has full control over the project and can add or revoke authority to other users and servers?

I've been meaning to try this. It seems interesting, but not sure how well it works: https://radicle.xyz/

Federation has been talked about with Gittea and Foregio, but I don't think any significant progress has been made.

Apparently there's drama brewing in the open source hardware world. Sparkfun and Adafruit have parted ways:

Adafruit has all their Nigger Lives Matter and Pride shit on their website back in 2020 and it was literally the reason I'd buy stuff from Sparkfun instead. Isn't Adafruit woman run or something? Women in the workplace has been such a collossial failure. They do this underhanded back-channel shit all the time, and now it's destroying every industry.
 
I've been meaning to try this. It seems interesting, but not sure how well it works: https://radicle.xyz/

Federation has been talked about with Gittea and Foregio, but I don't think any significant progress has been made.
Why would they need explicit support for federation?
You have been able to do "federation" with basic git since day one.
You don't need any gittea or fereskinio shit.

1, You fork someones public repository.
2, You create changes in your fork and push to your public facing repository
3, git request-pull to tell upstream to review and pull your changes.

You don't even need a UI frontend. Just have git, standard normal vanilla git-daemon listening on a public interface.

Or do they mean authenticating and push into other peoples repositories directly?
That can also be done by sharing ssh keys but that is retarded.


Sounds like gitea and foreskin people don't understand what git is or how you use it.
 
Hahahahahahahahaha How The Fuck Is Git Federation Real Hahahaha Nigga Just git diff >my_changes.patch Like Nigga git apply my_changes.patch Haha
 
Sounds like gitea and foreskin people don't understand what git is or how you use it.
i'm just guessing but i think the majority of people think federation is to git as archives are to websites.

> they can't take down my repository if it's federated to 100 other instances

might be wrong, but also i just don't care enough to look. federation is a buzzword technology. whenever anyone asks me about it i always tell them to check matrix and see how federation works for them. does it work, sure. does 95% of the userbase still just use one instance? also yes.
 
i'm just guessing but i think the majority of people think federation is to git as archives are to websites.

> they can't take down my repository if it's federated to 100 other instances

might be wrong, but also i just don't care enough to look. federation is a buzzword technology. whenever anyone asks me about it i always tell them to check matrix and see how federation works for them. does it work, sure. does 95% of the userbase still just use one instance? also yes.
I think it's easier to just point people to email as an example they will understand of what federation is.
 
Yes, it’s pretty easy using Tailscale Sharing.

I realize I should expand on my comment here, because the implications are pretty profound:

Starting around 1999, the introduction of cable modems, DSL, and wi-fi routers drastically changed how the internet was laid out. This is due to the widespread adoption of NAT, network address translation. Your cable modem or DSL would give you a single IPv4 address, and your home router would give out private IPv4 addresses. When your home computers wanted to talk to the internet at large, your router would convert/translate your private IP address to your ISP-provided address and make sure everything gets routed to where it needs to go. Your home router still works like this today.

This had positive and negative security impacts. Having this virtual condom between your PC and the internet became critical if you wanted to use a bargain-basement low-quality operating system like Windows XP. (Folks as old as me might remember trying to install Windows and discovering it had been compromised with a remote SYSTEM-level exploit before the installation had finished.). Windows XP wasn’t remotely safe to run or install on a bare IPv4 address until SP4 or so. On the negative side, folks who wanted to establish direct connections to other computers around the world often relied on sketchy protocols like UPnP, which were and are a security nightmare.

But the biggest impact is that making direct connections to other computers that weren’t HTTP/S connections became perceived as abnormal. The entire “cloud” industry and online service industry can be seen as a profitable response to this new internet. Instead of letting all of your computers talk and sync seamlessly across the internet, companies provided services on bare IPv4 addresses that everyone could talk to despite NAT. Everything you did on the internet became mediated through these large service companies because the operating system companies wouldn’t spend the money to secure their operating systems.

In the past few years, this has all changed, for the folks paying attention. This is due to zero-trust networking. Tailscale and its competitors let you use the internet like the greybeards of yore, and without the massive security holes.

When you create a Tailscale account, you create a “tailnet”. This is the collection of all of your computers and devices that have installed the (open-source) Tailscale client and are logged in. Tailscale’s (closed-source) servers assist your client in establishing point-to-point encrypted WireGuard tunnels between all the computers and devices on your tailnet by default. The Tailscale client includes tech (mostly based on STUN/ICE) that punches secure holes through your NAT and keeps the tunnels up reliably.

Because the Tailscale client punches through NAT, this means all of your computers and devices suddenly are able to communicate wherever they are in the world. Go on a trip, and you can easily phone home to your homelab, etc. with zero configuration. If you remember trying to do this with DynDNS back in the day, you’ll remember it sucked and wasn’t reliable. This stuff is very reliable. And with Tailscale’s ACL system, you can define exactly which devices get to talk to each other.

Suddenly iCloud, Google Workspace, GitHub, etc. become pointless. You want all your contacts synced? Install a CMS app or NextCloud on your home server. You want seamless Git sharing? Install forgejo on your home server. (Forgejo is the same software codeberg uses.). Your home server is just another machine on your tailnet, and every device you own can talk to it.

With the advent of Tailscale Sharing, you can communicate between devices in different tailnets. Your friend has a bitchin’ collection of movies and warez, but you don’t want to fly to visit or FedEx him a hard drive? Have him share his file server with your tailnet.

So when I see folks making suggestions like reverting to patches over email, I scream inside. Use this cool technology, own your own worldwide network, and stick it to the big companies.

(If you object to Tailscale’s servers being closed-source, there is a less-featured open-source version called Headscale you can run yourself, but you’ll need a bare IP address to run it from, such as from AWS EC2.)
 
Last edited:
Tailscale and its competitors let you use the internet like the greybeards of yore, and without the massive security holes.
I've tried looking into Tailscale multiple times, but could never understand what it actully provides that I couldn't setup muself with WireGuard. Aside from convenience, I guess?
More to the point, I can't reconcile the idea of having a "peer-to-peer" "zero-trust" "mesh" network with having to have an account with a third party and depending on said party's centralized server.
 
I've tried looking into Tailscale multiple times, but could never understand what it actully provides that I couldn't setup muself with WireGuard. Aside from convenience, I guess?
whereas your own WireGuard configuration is static, Tailscale is dynamic. Suddenly your phone or laptop is in another state? Tailscale adapts in seconds and reestablishes your tunnels. If you are sophisticated enough to adapt to this yourself, I agree you don’t need Tailscale.

More to the point, I can't reconcile the idea of having a "peer-to-peer" "zero-trust" "mesh" network with having to have an account with a third party and depending on said party's centralized server.
The simplest answer is, use Headscale.

The answer that Tailscale devised to prevent folks migrating to Headscale and costing them revenue is “Tailnet Lock”. From their docs:

Tailnet Lock lets you verify that no node joins your Tailscale network (known as a tailnet) unless trusted nodes in your tailnet sign the new node. With Tailnet Lock enabled, even if Tailscale were malicious or Tailscale infrastructure hacked, attackers can't send or receive traffic in your tailnet.
 
I'll just stick to my own copy of NextCloud and GitLab(some day I'll replace it) on the "public" Internet and a WireGuard tunnel to my dynamic IP when I need it.

I actually found an Internet provider with twice the speed and half the cost of my current one. Then I read the fine print "80 and 443 inbound blocked". Ok, never mind, expensive one it is.
 
I'll just stick to my own copy of NextCloud and GitLab(some day I'll replace it) on the "public" Internet and a WireGuard tunnel to my dynamic IP when I need it.

I actually found an Internet provider with twice the speed and half the cost of my current one. Then I read the fine print "80 and 443 inbound blocked". Ok, never mind, expensive one it is.
The whole point of a VPN like Tailscale is that your ISP never sees any inbound 80/443 to block. All of the relevant traffic is on other ports: https://tailscale.com/kb/1082/firewall-ports

But anyway, you’re totally right, IP over carrier pigeon is the future. Artisanally-created packets just flow better.
 
Last edited:
This had positive and negative security impacts. Having this virtual condom between your PC and the internet became critical if you wanted to use a bargain-basement low-quality operating system like Windows XP. (Folks as old as me might remember trying to install Windows and discovering it had been compromised with a remote SYSTEM-level exploit before the installation had finished.). Windows XP wasn’t remotely safe to run or install on a bare IPv4 address until SP4 or so.
Agreed and had literally exactly this happen, that is, system infected before the install was even finished. XP was actually pretty good after SP3.
 
might be wrong, but also i just don't care enough to look. federation is a buzzword technology. whenever anyone asks me about it i always tell them to check matrix and see how federation works for them. does it work, sure. does 95% of the userbase still just use one instance? also yes.
You don't even need a UI frontend. Just have git, standard normal vanilla git-daemon listening on a public interface.

Or do they mean authenticating and push into other peoples repositories directly?
That can also be done by sharing ssh keys but that is retarded.
Hahahahahahahahaha How The Fuck Is Git Federation Real Hahahaha Nigga Just git diff >my_changes.patch Like Nigga git apply my_changes.patch Haha

Ah yes, I'd expect no less from the KF open source community. You niggers know what I fucking mean. Yes yes yes, we all know you can use git send-email, and if you're autistic enough you can even do verified PGP signed commits over e-mail. Hell you can send diffs as attachments on XMPP if you want to.

We were talking about Github/Codeberg/etc. .. so I was talking about web based or "forge" interfaces that have all the other shit: pull/merge requests where people can comment and code review. Issue trackers. All that other shit. Unless you're talking about switching to Fossil, git (by itself) has none of that. That's the whole reason Github got its start, and Gitlab essentially made an open source version. It's not just a web interface to view git (you can use cgit for that), but all the other stuff that makes it easier to pass code around or get someone to fix their patch or easily tell if they need to rebase without and endless chain of e-mails.

Federation is just doing that between different two or more interdependently run servers. But I guess if you want to have that ultimate high bar to keep all the trannies out, by all means, allow your code to be only browsable by cgit, require all patches to be sent via e-mail and use the GPL+NIGGER license. You do you man.

I've tried looking into Tailscale multiple times, but could never understand what it actully provides that I couldn't setup muself with WireGuard. Aside from convenience, I guess?
More to the point, I can't reconcile the idea of having a "peer-to-peer" "zero-trust" "mesh" network with having to have an account with a third party and depending on said party's centralized server.
whereas your own WireGuard configuration is static, Tailscale is dynamic. Suddenly your phone or laptop is in another state? Tailscale adapts in seconds and reestablishes your tunnels.

Yea I don't see the point in Tailscale either. A dynamic DNS script + wireguard lets me connect to my home network wherever I go. I can change my firewall rules to forward ports from a VM to a homelab machine for things like torrents.

I had a contract with a client that was using tailscale. The first thing I absolutly hated was that you couldn't use a god damn fucking e-mail address to sign up! They required using a shitty 3rd party auth sytem like Github or Microsoft or whatever. They explicity said on their website they didn't want to be responsible for credentials/e-mail logins (although they would let you use your own OAuth authentication server, which are painful to setup). What kind of nigger shit is that?!

On top of that, if you want to do anything advanced (like forward ports from a public IP, tunneling etc.) their documentation is horrific and they even had JSON blob configurations in their web interfaces. It looked like there was a a lot of stuff for temporally making stuff public using their DNS subdomains, similar to using ngrok or Cloudflare tunnels, but not for some of the use cases this client needed.

I guess tailscale is okay if you need basic stuff and are afraid of the command line and iptables/nftables. But for more advanced stuff, it just seems even more painful than rolling my own.
 
Federation is just doing that between different two or more interdependently run servers. But I guess if you want to have that ultimate high bar to keep all the trannies out, by all means, allow your code to be only browsable by cgit, require all patches to be sent via e-mail and use the GPL+NIGGER license. You do you man.

I think I know what you mean, but my point is that all this federation is already available in normal git, and ALSO in all the web based UI interfaces, like github or gitlab.

But I am not talking just about "git send-email" that is really meant for if you want to do patch review on a mailinglist. Some projects do that, other projects use pull requests in gerrit or similar.
I don't think git send-email i meant for sending and merging patches. You CAN use it for that but if you have a large volume of patches that are contributed it gets old real quick to waste time on "git am" every individual patch. And error prone since it is easy to drop one patch out of a larger series.

No what I am talking about is actual federation between different git servers. And that already exists, since day one pretty much.

Example:
Say you have a project you host on github. For whatever reason I don't use github so instead I clone your project and put my fork on gitlab instead.
I create a patch in my gitlab instance and then I "git request-pull" and send you a pull request.
You then either click on the URL that was sent to you if you want to review it, or else you just merge it into your repository.
You can already do that between github/gitlab/my own git + ui I spun up on some server/gitea/...

That is my point. You can already do what most people call "federation" today. It is kind of part of the concept of being a distributed code versioning system. "Federation" is kind of implicitely built in just by the nature of git being designed to be distributed. And the whole point of git is that You work on oyur server, I work on my server, then you pull the changes from my server into your server.

That is the what I mean. What is the point in what these federation guys are doing.
What is missing in the existing "federation" stuff we already have? I don't see it.

It is just a buzz-word. It brings nothing new. Anything and everything you can already do today. It really just sounds like buzzwords to attract venture capital. Maybe they should add NFT and block chain?
 
Lunduke calls the VTuber an animal cartoon prostitute :story:
I'll take all the clocks I deserve from page 604 of 619, but what comic gold this whole section is. Right when I get done recovering from, "I dress like a prostitute not because I am one, but because I am retarded," I get to hear Lunduke ask, "What's a femboy?"

Edit:
Did anyone post this? Gentoo moves off of github because "fuck AI", from the new year's report (archive)


Also somehow I missed the GPG fracture news apparently?
Huh. I knew that Gentoo had been working of moving from SVN to Git, I didn't know that they had moved to GitHub. I've clearly been out of the loop for a while. I thought they were hosting their own infrastructure?
 
Last edited:
Say you have a project you host on github. For whatever reason I don't use github so instead I clone your project and put my fork on gitlab instead.
I create a patch in my gitlab instance and then I "git request-pull" and send you a pull request.
You then either click on the URL that was sent to you if you want to review it, or else you just merge it into your repository.
You can already do that between github/gitlab/my own git + ui I spun up on some server/gitea/...
That's a perfectly valid workflow if you're happy with it. But that is still done through email, right?

The forge federation approach allows users to use their own server & (web) UI through the whole process of sending pull requests, searching through issues, giving updoots, etc. It's about standardizing the modern software forge (GitHub and its copycats), reviving Git's federation without sacrificing on UX.

Also, if we really want to kill GitHub, the alternative must be as good or better. Ain't no way the majority millennials and beyond will move back to plaintext email (I would like it if they do, though).
 
Back
Top Bottom