News for hackers. Stuff that matters.
Re:Are pull requests bad because they originate from open-so... by SkyBelow on Tuesday April 25, 2023 @10:14AM (#35700787)
>trust but verify

If you have to verify, is there really trust?

We need to get to the point that a lack of trust isn't some inherently bad thing. I don't trust myself to never make mistakes. A PR is a way to get others to add a layer of verification to help catch bugs. I don't even trust the PR to catch all bugs, but it is a cost effective for the amount of bugs it does catch. Why is this lack of trust a bad thing? Humans are imperfect, we should build systems that require verification because we cannot trust ourselves to never make a mistake.

Re:Are pull requests bad because they originate from open-so... by burnished on Tuesday April 25, 2023 @10:53AM (#35701316)
In this context if you arent trusted then your PR isnt even looked at.