Github is Not Open Source | Juliette — I write
listed.to
Github is Not Open Source | Juliette — I write
    • onlinepersona@programming.devEnglish
      3·
      7 months ago

      Not sure what you’re suggesting. Here… are you suggesting random write access to a port on a device you host? Anybody can push a branch to your selfhosted repo?

      Or are you talking about self-hosted forgejo, gitlab, etc.?

      Anti Commercial AI thingy

      CC BY-NC-SA 4.0

      Inserted with a keystroke running this script on linux with X11

      #!/usr/bin/env nix-shell
#!nix-shell -i bash --packages xautomation xclip

sleep 0.2
(echo '::: spoiler Anti Commercial AI thingy
[CC BY-NC-SA 4.0](https://creativecommons.org/licenses/by-nc-sa/4.0/)

Inserted with a keystroke running this script on linux with X11
```bash'
cat "$0"
echo '```
:::') | xclip -selection clipboard
xte "keydown Control_L" "key V" "keyup Control_L"
      • lurch (he/him)
        1·
        7 months ago

        Yes, if you want to accept pull requests from anyone, you can set up a jailed git server with public access, for example.

        • onlinepersona@programming.devEnglish
          2·
          7 months ago

          That’s not a pull request, but a merge request. Besides the point though. What I’m getting at is: isn’t that asking for trouble? Somebody could

          while true ; do
  head /dev/urandom -c 100MB > file.txt
  git add file.txt
  git commit -m "new commit"
  git push
done

          and fill up your hard drive. Also, depending on the protocol, they could try fuzzing it. Or, pipe /dev/urandom into nc and blast your git port.

          And of course, the first problem is discoverability. Who’s going to find your random, unfederated, git service?

          It just doesn’t sound like a convincing solution, IMO.

          Anti Commercial-AI license

          • lurch (he/him)
            1·
            7 months ago

            no, it’s not specific to merge requests. theres a tool called git-shell that prevents abuse