News for hackers. Stuff that matters.

A comment on How the .NET Foundation kerfuffle became a brouhaha. Parent comment

Re:How the .NET Foundation kerfuffle became a brouhaha by hulitu on Friday October 08, 2021 @01:27AM (#28796029)
Github _is_ the embrace phase. It is sad that a lot of OSS projects do not see it. MS has through Github control over OSS. As someone noted in another post they want admin access. This means that they can do what they want with your code even injecting malware. I wonder if people wanting to deprecate FTP do not have a hidden agenda. Because with https you are at the mercy of an organization.
[ Parent | on HN ]
Re:How the .NET Foundation kerfuffle became a brouhaha by mathw on Friday October 08, 2021 @04:41AM (#28797038)
The .NET Foundation wanting admin access to repos of projects under the .NET Foundation umbrella is very much not the same thing as how the people who run GitHub could backdoor any repo they like whenever they want, obviously they can they have the source code to the hosting platform.

Except that's pretty hard to do without developers noticing because you'd need to engineer some hash collisions to get their local git clones to accept the code changes.

So let's limit the paranoia to where it actually applies, shall we? The .NET Foundation has made a right mess of this, but it's not the same thing as Microsoft trying to backdoor all open source code on GitHub. I'm pretty sure the people there are smart enough to realise how much that would backfire.

[ Parent | on HN ]
Re:How the .NET Foundation kerfuffle became a brouhaha by 2fast4you on Friday October 08, 2021 @01:39AM (#28796087)
Oh I think we’ve started the extend phase. Did you notice they put out their own GitHub specific git cli? And they removed ssh links and replaced them with links specific to their cli
[ Parent | on HN ]
Re:How the .NET Foundation kerfuffle became a brouhaha by badsectoracula on Friday October 08, 2021 @01:46AM (#28796113)
At least in a couple of projects i just checked the SSH link is still there, between the HTTPS and the GitHub CLI command.
[ Parent | on HN ]
Re:How the .NET Foundation kerfuffle became a brouhaha by viccuad on Friday October 08, 2021 @03:03AM (#28796499)
Only if you are logged in. It used to be there always.
[ Parent | on HN ]
Re:How the .NET Foundation kerfuffle became a brouhaha by tkfu on Friday October 08, 2021 @05:24AM (#28797260)
Are you sure about that? I certainly don't recall that, and it seems like it would be a bad UX idea anyway: you can't clone a repo via SSH without having an account (and a pubkey registered), so showing the SSH string to people who aren't logged in seems counterproductive.
[ Parent | on HN ]
Re:How the .NET Foundation kerfuffle became a brouhaha by DrewRWx on Friday October 08, 2021 @02:43AM (#28796400)
`gh`is great for handling pull requests and other GitHub specifics. I still use `git` for everything else, so I dunno how much it does, but it makes sense if `gh` overlaps with some `git` commands to round out the tool.
[ Parent | on HN ]
Re:How the .NET Foundation kerfuffle became a brouhaha by kuschku on Friday October 08, 2021 @07:04AM (#28797854)
`hub` had the same functionality and could be used either standalone or integrated with git so `git hub` ran hub commands to e.g. manage a pull request.

gh is just trying to get you to stop using git itself

[ Parent | on HN ]
Re:How the .NET Foundation kerfuffle became a brouhaha by muxator on Friday October 08, 2021 @03:25AM (#28796601)
You've been lured by the "extend" phase.
[ Parent | on HN ]
Re:How the .NET Foundation kerfuffle became a brouhaha by maccolgan on Friday October 08, 2021 @05:33AM (#28797308)
Isn't GH's PR some awful sugar around the concept of merging a patchset?
[ Parent | on HN ]
Re:How the .NET Foundation kerfuffle became a brouhaha by bewuethr on Friday October 08, 2021 @05:49AM (#28797399)
The SSH links aren't replaced by the gh links, the gh links are just an additional option.
[ Parent | on HN ]
Re:How the .NET Foundation kerfuffle became a brouhaha by bewuethr on Sunday October 10, 2021 @12:35PM (#28819731)
Or actually, they aren't replaced everywhere: the "Code" tab still has HTTPS and SSH in addition to the GitHub CLI; the "Pull Request" tab has only the CLI.
[ Parent | on HN ]
Re:How the .NET Foundation kerfuffle became a brouhaha by Macha on Friday October 08, 2021 @06:02AM (#28797473)
The first time they did this with the hub tool, GitHub was only a few years old and many years away from any acquisition
[ Parent | on HN ]
[dead]
Re:How the .NET Foundation kerfuffle became a brouhaha by tempodox on Friday October 08, 2021 @05:07AM (#28797162)
“The OSS projects”? Such a sweeping claim would need some proof or at least references to show what you drew your conclusions from. Until then, I'm booking this under paranoid phantasy.
[ Parent | on HN ]