News for hackers. Stuff that matters.
Re:We stopped AI bot spam in our GitHub repo using Git's –au... by cermicelli on Monday May 18, 2026 @12:34PM (#48182006)
you can't trust org members either I have seen projects have inter maintainer fallouts. In general trust doesn't exist.

If companies can screw you over and claim it's a mistake, there isn't much a person can do.

It's all about level's of trust, a maintainer going rogue is less likely, a past contributor going rogue more likely but not too much, a stranger with a typo pr merged even more likely but still, a complete stranger least trust worthy.

Re:We stopped AI bot spam in our GitHub repo using Git's –au... by simgoh on Wednesday May 20, 2026 @01:56PM (#48211529)
You also can't fully trust org members because valid / "Trusted" accounts can be taken over by nefarious actors as well.