Re:PyPI Was Subpoenaed
by tptacek on Wednesday May 24, 2023 @02:07PM
(#36061900)
Lighten up. Nobody's going to federal court to stop the DOJ from investigating botnets, carding rings, and ransomware scams, which is what these things are usually about. Nobody's mental model of PyPI was that they had Signal's priorities.
[ Parent
| on HN ]
Re:PyPI Was Subpoenaed
by avgcorrection on Wednesday May 24, 2023 @02:10PM
(#36061937)
Then all the less reason to roll out the “of utmost importance” boilerplate. So what’s your point?
Also I don’t see how being light-hearted has anything to do with this submission, Thomas.
Re:PyPI Was Subpoenaed
by davidguetta on Wednesday May 24, 2023 @04:02PM
(#36063212)
Its just they have no choice. And when they do the choose their "utmost priority". Its not that complicated
Re:PyPI Was Subpoenaed
by mrguyorama on Wednesday May 24, 2023 @02:12PM
(#36061969)
Then they shouldn't say protecting their users are their top priority, because they have shown it is not. That's called lying. A correct statement would have been "we will comply with lawful LEO requests"
Helping convict scammers, typo-squatters injecting malicious code, etc is protecting their users. Just not the (likely) bad actors that are the subject of the subpoenas.
The fact remains, that unless you are willing to break the law, obeying the law is your top priority.
If you're so inclined, you're welcome to make an anarcho-oriented package management system yourself. PyPi has never claimed to be one, though.
This assumes that all of this is binary, when in reality it’s a complex system that takes time and effort to modify in a meaningful and responsible way.
How have they shown it's not, exactly? Really curious what you think they could have done better aside from blatantly going against laws in their jurisdiction.