News for hackers. Stuff that matters.
Re:Faker.js is now a community controlled project by shadowgovt on Sunday January 16, 2022 @10:51PM (#29963132)
I'm not sure how we get to me-first when the story is one actor using the wide-cast popularity of packages he had admin rights to to intentionally cause harm.

It's a "the needs of the many outweigh the needs of the few" situation.

Re:Faker.js is now a community controlled project by outsomnia on Sunday January 16, 2022 @11:02PM (#29963185)
It's a bit mind-boggling that FOSS authors who give their work away for free are the selfish baddies, and Microsoft of all people, are the communistic heroes in your telling.
Re:Faker.js is now a community controlled project by smt88 on Monday January 17, 2022 @12:07AM (#29963511)
> It's a bit mind-boggling that FOSS authors who give their work away for free are the selfish baddies

This is a straw man. No one made this generalization.

Marak, specifically, is a "selfish baddy", and it has nothing to do with FOSS. It has to do with his abuse of Github, npm, and Faker.js (which other people also contributed to) to distribute malware.

None of that can be generalized to a position about FOSS, Microsoft, or any other nonsense you're trying to extrapolate. It's specifically about a bad actor who was removed from a platform.

Re:Faker.js is now a community controlled project by outsomnia on Monday January 17, 2022 @06:57AM (#29965687)
> or any other nonsense you're trying to extrapolate.

Sorry you were complaining about straw man arguments?

Re:Faker.js is now a community controlled project by DonHopkins on Monday January 17, 2022 @11:22AM (#29968154)
Yes he was, and you were making them.
Re:Faker.js is now a community controlled project by outsomnia on Wednesday January 19, 2022 @06:07AM (#29992210)
Are you sure you understood my point?

>> It's a "the needs of the many outweigh the needs of the few" situation.

> It's a bit mind-boggling that FOSS authors who give their work away for free are the selfish baddies, and Microsoft of all people, are the communistic heroes in your telling.

The discussion is about Github - microsoft - undoing the author's changes, the guy I replied to saying that this was good because he felt the author was "doing harm". So he definitely is saying that microsoft are the heroes there defeating "harm". And since he is supposed to be "doing harm" for his own benefit, the FOSS author being overridden by microsoft is the "selfish baddie".

For my edification, if you have a moment you can you help me understand where my comment failed to hew to a valid analysis of that part of the discussion and became some nasty straw manning activity?

Re:Faker.js is now a community controlled project by fault1 on Sunday January 16, 2022 @11:44PM (#29963404)
I mean, catering to the needs of the many rather than the few has pretty much been npm policy since left-pad-gate:

https://twitter.com/seldo/status/712417019686100992

https://blog.npmjs.org/post/141905368000/changes-to-npms-unp...

Re:Faker.js is now a community controlled project by shadowgovt on Sunday January 16, 2022 @11:35PM (#29963356)
Not all FOSS are selfish baddies. Not even most. Not even many.

But Marak specifically is, and Microsoft being the good actor is indicative of how badly he messed up.

If his goal was to make a statement about big corporations taking more than they give to FOSS, arranging things so Microsoft gets to be the hero was a foolish way to go about it.