<jpk68:matrix.org> docs: allow non-github approvals paste.debian.net/hidden/e3f00177

<jpk68:matrix.org> Should be interesting to see what happens with this one :)

.merge+ 10052 10512

Added

<jpk68:matrix.org> According to the CoC, "[t]he project MUST use a share-alike license, such as BSD-3"

<jpk68:matrix.org> However, BSD-3 is not a share-alike license

<jpk68:matrix.org> paste.debian.net/hidden/a21d8228

<jpk68:matrix.org> ^ Fix for the above, as suggested in -research-lounge

<hfree:matrix.org> @jpk68:matrix.org: Why don't you commit yourself?

<jpk68:matrix.org> Banned GitHub account

<jpk68:matrix.org> (not banned for any good reason)

<hfree:matrix.org> Make a new one? I made a new one yesterday

<hfree:matrix.org> tor browser and protonmail

<jpk68:matrix.org> Believe me, I've tried

<hfree:matrix.org> Tor browser too?

<jpk68:matrix.org> No, clearnet with a resedential IP and real phone number

<jpk68:matrix.org> They don't respond to my emails

<hfree:matrix.org> On desktop or mobile?

<jpk68:matrix.org> Desktop.

<jpk68:matrix.org> Anyways, I have talked about this about 400 times and I don't want to keep clogging up this channel with me complaining

<hfree:matrix.org> You probably have a unique fingerprint that is banned

<hfree:matrix.org> It's highly likely that you're banned because you share a fingerprint with someone that did something against the policy. Bulk registration > <@jpk68:matrix.org> (not banned for any good reason)

<hfree:matrix.org> Your phone number and emails are probably flagged too

<hfree:matrix.org> Make everything new. No browser extensions

<syntheticbird> Microsoft is god, you have been banned for good reason > <@jpk68:matrix.org> (not banned for any good reason)

<jpk68:matrix.org> @hfree:matrix.org: Sure, but that's besides the point. If a decentralization-focused project is entirely dependant on a centralized platform (especially one owned by a company such as Microsoft) for its operations, and users can just be entirely blacklisted at their will, that's... problematic, to say the least

<syntheticbird> @jpk68:matrix.org: There is a lot of problematic centralization issues in this decentralized-focused project and github is just one of them. Don't worry you are not the first and you won't be the last to complain.

<jpk68:matrix.org> @hfree:matrix.org: Thanks, I don't need any more convincing that the powers that be don't like me :P

<hfree:matrix.org> @jpk68:matrix.org: True. Can you give me a fresh email address (without login credentials)? I will try to register from tor browser

<jpk68:matrix.org> No thanks, I'm good

<ofrnxmr:xmr.mx> @jpk68:matrix.org: Fake news

<ofrnxmr:xmr.mx> Monero is not dependent on github

<ofrnxmr:xmr.mx> If github disappeared tomorrow, do you think we'd be fucked? Obv not.

<syntheticbird> @ofrnxmr:xmr.mx: The Monero project isn't, but its contributors are

<ofrnxmr:xmr.mx> @syntheticbird: No they arent

<jpk68:matrix.org> @ofrnxmr:xmr.mx: We disagree and that's fine. No need to argue about this :)

<syntheticbird> @ofrnxmr:xmr.mx: oh please spare me the "just give your patch on pastebin" bs

<hfree:matrix.org> You don't have to complain and share commits on paste everyday. Create an account with a different fingerprint. Tor browser works...... > <@jpk68:matrix.org> Anyways, I have talked about this about 400 times and I don't want to keep clogging up this channel with me complaining

<jpk68:matrix.org> @ofrnxmr:xmr.mx: I think if the CoC says "contributors MUST have a platform account to accept or reject patches", that's not gonna work

<ofrnxmr:xmr.mx> @ofrnxmr:xmr.mx: ^

<r4v3r23> why doesnt monero mirror its codebase on the hosted gitlab repo?

<jpk68:matrix.org> Good question...

<ofrnxmr:xmr.mx> No

<syntheticbird> @ofrnxmr:xmr.mx: and while github exists, people that can't sign in github (skill issue imo) are blocked from contributing

<syntheticbird> according to your logic

<syntheticbird> @r4v3r23: of fucking hell the gitlab repo is so undermaintained i hope they never do that.

<r4v3r23> @syntheticbird: lol

<ofrnxmr:xmr.mx> Blocked from openibg a github pull request is not the same thing as blocked from contributinf

<hfree:matrix.org> @syntheticbird: Huge skill issue

<syntheticbird> @ofrnxmr:xmr.mx: "YoU CaN pErFeCtLy GiVe YoUr PaTcH To SoMeOnE ElSe AnD It WiLl PoSt It FoR yOu"

<syntheticbird> like this is realistically ever going to happen for +100 PRs

<ofrnxmr:xmr.mx> Jpks probably close to 20 now

<jpk68:matrix.org> In the core repo? Way lower

<syntheticbird> Just saying push mirrors are a thing nowadays

<ofrnxmr:xmr.mx> On github

<jpk68:matrix.org> Probably six or so, plus three in GUI and seven in P2Pool

<syntheticbird> and Github oauth2 could perfectly be used for lazy maintainers to not have to redo an account

<ofrnxmr:xmr.mx> @jpk68:matrix.org: So.. 16

<jpk68:matrix.org> and then some in Monfluo, etc.

<syntheticbird> i have a doubt here, i was referring to +100 loc, not +100 PRs

<jpk68:matrix.org> For every single one of the commits I made after my account was banned, I had to DM someone or have them offer to go out of their way to get it posted on GH. If I have to wait 10 hours for someone to update a mirror (no offense meant at all, that's just the way it is), and have to get people to forward review comments, I can in no way contribute in the way everyone with an account can

<ofrnxmr:xmr.mx> @syntheticbird: monero-project/monero #10523 1000loc

<jpk68:matrix.org> @ofrnxmr:xmr.mx: The lines are blurry, and it depends what you consider to be "core"

<ofrnxmr:xmr.mx> I said github, not core

<jpk68:matrix.org> I am considering just making a fork of the Monero repo on the hosted GitLab, because people have accounts there anyways

<jpk68:matrix.org> Unless it will use too much storage space (which it probably will)

<ofrnxmr:xmr.mx> > <@jpk68:matrix.org> For every single one of the commits I made after my account was banned, I had to DM someone or have them offer to go out of their way to get it posted on GH. If I have to wait 10 hours for someone to update a mirror (no offense meant at all, that's just the way it is), and have to get people to forwar [... too long, see mrelay.p2pool.observer/e/57_3hoMLVlZ6QzlP ]

<ofrnxmr:xmr.mx> You also like to use not-functional draft prs like a save button. I personally dont think the pr should have been opened in the state that it was, and storing hundreds of mbs and doing 3hrs of CI runs multipke times a day (when u know the code doesnt work) doesnt make sense

<syntheticbird> @ofrnxmr:xmr.mx: I am not gonna argue "technically we did" bullshit. You know the workflow through middle men is outrageously slow and unhealthy for the quality of the PR.

<jpk68:matrix.org> @ofrnxmr:xmr.mx: You're talking about one PR that alone comprises a CCS. "Draft" PRs exist for a reason; I have never done this for documentation changes

<syntheticbird> @jpk68:matrix.org: You complain about Github but gitlab is worse

<syntheticbird> They are requesting credit card for sign in

<jpk68:matrix.org> I know. Not actual GitLab, our GitLab

<ofrnxmr:xmr.mx> @syntheticbird: I think theyre talking about the broken ccs gitlab

<hfree:matrix.org> > <@jpk68:matrix.org> For every single one of the commits I made after my account was banned, I had to DM someone or have them offer to go out of their way to get it posted on GH. If I have to wait 10 hours for someone to update a mirror (no offense meant at all, that's just the way it is), and have to get people to forwar [... too long, see mrelay.p2pool.observer/e/4ZL-hoMLRUZhcDJU ]

<hfree:matrix.org> fingerprint or other unique indicators

<syntheticbird> @jpk68:matrix.org: our Gitlab ? or OUR GITLAB

<syntheticbird> @ofrnxmr:xmr.mx: oh

<syntheticbird> i mean yeah there is 5 million users in there

<jpk68:matrix.org> @hfree:matrix.org: Not to be rude, but I am well aware of that and you can stop bringing it up. I know how to make burner accounts.

<jpk68:matrix.org> How hard would it be to get someone from Core to just set up a mirror on GL, and we can submit PRs there? CI can be worried about later

<syntheticbird> @jpk68:matrix.org: very hard

<syntheticbird> and not for technical reason

<jpk68:matrix.org> I am sure it would be preferable to my current duct-taped Codeberg situation

it's already taking weeks to get gitlab back up, expecting larger maintenance from core is unrealistic

<hfree:matrix.org> @jpk68:matrix.org: Then why you can't do it without getting banned and bots can?

<jpk68:matrix.org> Maybe then we can stop pretending this problem doesn't exist, and make it clear that the current infra is far from ideal

<syntheticbird> @hfree:matrix.org: bro is speaking the quiet part loud

<hfree:matrix.org> @hfree:matrix.org: github.com/iuyua9

<hfree:matrix.org> "Joined last week"

hfree this is a soapbox moment (if you genuinely are trying to help)

its not about 'being able to create an account' - which is as ez as a-z github.com/auyua9 github.com/zuyua9

<jpk68:matrix.org> plowsof: Can you please ask the people you know to consider moving/mirroring some stuff on GitLab? I think it's worth a try

<r4v3r23> @jpk68:matrix.org: this comes up every so often

<r4v3r23> its not gonna happen

<syntheticbird> @jpk68:matrix.org: bro is asking that like plowsof knows a secret society with more authority on the repo than this channel

<r4v3r23> "theres plenty of copies sitting around peoples hard drives"

<redsh4de:matrix.org> selsta: isn't that core's job though?

<syntheticbird> @redsh4de:matrix.org: ITS ALL VOLUNTEERS ALRIGHT STOP BEING UNHAPPY ABOUT PEOPLE FREE TIME

<jpk68:matrix.org> @syntheticbird: Maybe having commit access to the exact repo in question is relevant here..?

I don't see how a mirror on Gitlab would help the workflow for people that don't have a Github account

we do CI and reviewing on GitHub so Codeberg or GitLab would ber irrelevant

<ofrnxmr:xmr.mx> @redsh4de:matrix.org: No

<jpk68:matrix.org> selsta: I agree with redsh4de's comment on this. This should be answered.

<redsh4de:matrix.org> @ofrnxmr:xmr.mx: getmonero.org/2018/03/01/core-team-announcement.html

<redsh4de:matrix.org> > Manage the codebase of the Monero Project, which includes merging code on Github, keeping backups, and ensuring the safety, security, and free access of the code from any party.

<ofrnxmr:xmr.mx> Core doesnt exist in the same capacity as it did in 2014

<syntheticbird> @redsh4de:matrix.org: lawyer said its a marketing term with no engagement sorry

<jpk68:matrix.org> If we want to get pedantic, read-only access to the code does not really count as "accessing the code" in the sense of contributing to open source

<ofrnxmr:xmr.mx> Tobtoht isnt core and he merges code on github now. Core sogns off on releases and maintains infra and wallets

<r4v3r23> @jpk68:matrix.org: if you can clone it...

<ofrnxmr:xmr.mx> @redsh4de:matrix.org: Also, that says github, not gitlab :P

<redsh4de:matrix.org> id consider gitlab being a part of keeping backups

we don't use gitlab for repo backups

the version we use doesn't even support mirroring, afaik in the past this feature was behind a paywall

so we'd have to setup our own mirroring

<jpk68:matrix.org> Is this a frog we have to swallow?

also getmonero.org/community/sponsorships

<jpk68:matrix.org> Is literally anyone opposed to this in principle, or are they just not looking forward to a bit of inconvenience?

<syntheticbird> selsta, I half disagree on your statement. Having a push mirror on Gitlab would ease the barrier of entry for this exact reason and contribute to the privacy of contributors. Realistically, this doesn't improve the workflow of the project, but for the few cases of people not wishing to because of privacy reasons and/or unable [... too long, see mrelay.p2pool.observer/e/tISuh4MLV2NCTWJD ]

<ofrnxmr:xmr.mx> Youre the main one that doesnt want to inc(nvenience themself with a new acct, tbf

<hfree:matrix.org> plowsof: Hi plowsof. I'm happy to see your CCS almost got filled aside that many expensive CCS'. I did try to help. Yes, bots can create new accounts and make PRs without getting banned. Some humans not. At this point it makes no sense to blame github

oh thank you

99.9% of our gitlab was spam

it'd be easier to just post a patch here then to also deal with spam prs and comments there

<ofrnxmr:xmr.mx> @syntheticbird: Wen librejo revival

<syntheticbird> selsta: my statements only have the goal to ask for an alternative to github. Of course i don't want the CCS gitlab to be used because of the reasons you just said and others

I don't understand what you mean with push mirror exactly in this case

<jpk68:matrix.org> selsta: I think it's clear a decent amount of contributors here are not happy with GitHub. I would like to respectfully ask you and others to reconsider using GitHub as the primary platform.

<jpk68:matrix.org> cc tobtoht plowsof

<syntheticbird> selsta: In a push mirror setup, Github is the main authority and another platform like Forgejo would automatically pull changes from Github, but contributors can make PRs on Forgejo, with the whole discussion and maybe CI process, and when merged it get pushed on Github.

I'm against it for the reasons i've said multiple times

<ofrnxmr:xmr.mx> @jpk68:matrix.org: Are they in the room with us now 🫡

<jpk68:matrix.org> selsta: Against GH, or the alternatives?

against moving away from GH

<syntheticbird> I too am against moving away from GH. I'm just advocating for a push mirror on another platform

<redsh4de:matrix.org> @jpk68:matrix.org: idk about this (Github is fine), but having push mirrors is only a net positive as it decentralizes the contribution workflow

syntheticbird: how would such a push mirror get setup securely?

<jpk68:matrix.org> @redsh4de:matrix.org: Yes, that's what I mean. Not fully to other platforms, but towards not having GH as the sole and primary one.

<jpk68:matrix.org> Can this be brought up at a MRL meeting? I'm not saying I'm going to push for it, I just want to gauge interest in it.

<ofrnxmr:xmr.mx> Its not a research subject, so no

how would me make sure it passes build beforehand? we have an extensive build and test matrix on GitHub that has saved as so many build issues and regressions compared to before we had this setup

I don't want to merge things only for later to have fixup PRs

<jpk68:matrix.org> selsta: Someone can work on replicating CI workflows for GitLab's CI, and then that can be merged into the main repo alongside GH actions.

<ofrnxmr:xmr.mx> cuprate could lead by example? /s

who would pay and maintain these CI servers (Linux, Windows, macOS)?

we can't even get weblate setup for over a year now

<jpk68:matrix.org> The general fund

<jpk68:matrix.org> It looks like myself, SyntheticBird, and redsh4de are in support of an "official" mirror on a platform such as the self-hosted GitLab. Others do not seem entirely opposed. Is this correct?

<ofrnxmr:xmr.mx> I dont think that is accurate

no one has answered how such a push mirror would be setup securely

<jpk68:matrix.org> What do you mean, securely? As in, ensuring contributions are from who they say they are?

if the gitlab server can push to our github that's insane

<jpk68:matrix.org> There could be a requirement to sign commits using the same PGP key

<syntheticbird> selsta, You have to setup webevents with a github access tokens that can push to the upstream (github) repo. Forgejo have an automated setup for that. About CI ? We would need to have our own CI infra. So this is a valid point of concern imo

gitlab has critical CVEs every couple weeks

yep

<jpk68:matrix.org> Yet another reason to not use them.

<ofrnxmr:xmr.mx> Is there an example of a large project that does this

i'm against any setup where a push token would be in the hands from anyone apart from core / tobt on local devices

i thought we where not using github, or gitlab - or has the context gotten to large

no setup where a server gets a push token, that's insane for security alone for a project like monero

(unless i'm missing something)

<jpk68:matrix.org> selsta: No, it would not. It's just essentially an auto-updating mirror of the main GitHub repos, which people can fork on GitLab, and add PRs to the GitLab repo which are merged to GH after approval.

<ofrnxmr:xmr.mx> Ppl contribute on an offshore platform, and the stuff gets yolo's into the release w/o any of the 9/10 github main contributors noticing

auto updating mirror is not the same as a push mirror which was suggested

<jpk68:matrix.org> The reason it being 'official' is relevant is just that people consider it to be so, and will check it

<syntheticbird> selsta, no you are not missing anything, that is a requirement. Securing the token is up to the infra operator

<jpk68:matrix.org> I did not suggest a push mirror. Either is fine.

<hfree:matrix.org> Hahahahahaha > <@ofrnxmr:xmr.mx> Its not a research subject, so no

<syntheticbird> So yes, If this is a concern the discussion can be closed and the idea rejected

<jpk68:matrix.org> Regarding other projects that do this, both FFmpeg and GCC have similar workflows AFAIK

<jpk68:matrix.org> FFmpeg has a Forgejo/cgit repo they self-host, and a mirror on GitHub that can also be used for PRs. I'm not saying it has to be exactly that, and besides, it can change over time.

<hfree:matrix.org> @jpk68:matrix.org: You make me laugh. I'm thankful for your contributions. Don't get me wrong

the infra operator can secure as good as he wants, with GitLab being an insecure mess (mooo has update it constantly due to critical security issues), it's a matter of time until someone would get push access to our main repo

<jpk68:matrix.org> Then we can just have a non-push mirror. Does anyone disagree with this?

<syntheticbird> selsta: you can forget gitlab as an argument, no one here is ever planning on using gitlab

<ofrnxmr:xmr.mx> anyone can run a non-push mirror

<syntheticbird> we are all perfectly aware this is utter shit

<ofrnxmr:xmr.mx> Isnt @pyxmr2025:mozilla.org doing this already

<jpk68:matrix.org> @syntheticbird: It's probably best to just choose the path of least resistance

<ofrnxmr:xmr.mx> And didnt syn do this on librejo (forgejo)

<syntheticbird> @jpk68:matrix.org: You are in the wrong channel if you think so

<syntheticbird> literally everything about this project is taking the path of most resistance

<jpk68:matrix.org> @ofrnxmr:xmr.mx: They closed their CCS repo issue for it, plus it's literally based in mainland China. My point, again, is that is has to be considered official or no one is going to check the mirror.

<syntheticbird> @ofrnxmr:xmr.mx: yes I had a pull mirrors for all monero-project repo. But it was just updating on a timer, so not the same setup as i would have suggested with web events

<syntheticbird> if you use webevents, whenever one repo is updated the other are triggered to update

<jpk68:matrix.org> I meant in terms of getting Core to do something

<jpk68:matrix.org> This is just making it overcomplicated. Have a regular mirror on GL and we can move on from there.

<syntheticbird> ^ "Thinking about the vulnerability mess of the platform our security focused project is building upon is overcomplicating"

<redsh4de:matrix.org> ig that woud work. the mirror would sync FROM github, forks can be created there, maintainers can pull branches manually from the mirror into gh when submitted and re-open as PRs, instead of pastebin patches

<redsh4de:matrix.org> anyone can set something like that up and doesnt require a token

<hfree:matrix.org> 💪 > <@syntheticbird> literally everything about this project is taking the path of most resistance

<jpk68:matrix.org> @redsh4de:matrix.org: Yes. But again, it should be considered official for people to actually check/use it

<syntheticbird> @redsh4de:matrix.org: That's actually a good middle ground. Maybe if someone have the faith they can even make a bot account for mirroring the PRs from forgejo to the gh repo so that we can trigger CI check

<syntheticbird> This way i don't even have to ask anyone's permissions

<syntheticbird> selsta is going to hate me but he don't have to do anything

<redsh4de:matrix.org> have to see if theres precedent for a pattern like that, but i wouldnt be surprised if a setup like that does exist somewhere

a bot account would work fine

<ofrnxmr:xmr.mx> @jpk68:matrix.org: Hhaha

<syntheticbird> selsta: DEAL

<jpk68:matrix.org> selsta: Are you willing to ask someone with the proper permissions to just set this up? Please?

<syntheticbird> jk

i don't think it would need any permissions, am I missing something?

anyone can setup a mirror and the bot account

<jpk68:matrix.org> Does plowsof have the ability to make a new monero repo on GitLab (under the monero-project account)?

<syntheticbird> no im joking, im just saying I could just harass you with mirror bots and if you disagreed you would have to ban the bot accounts

core is not going to set this up, if you want this you need to make your own bot and mirror

<ofrnxmr:xmr.mx> @redsh4de:matrix.org: this is exactly what i do with i2p-sam branch

at a later point we can transition to an "official" mirror if it works well

<syntheticbird> duly understood

<ofrnxmr:xmr.mx> There are obv bots that make prs on the repo already

of course it's expected that the person with the mirror has signup disabled

and only manually adds new users

and looks out for spam

<jpk68:matrix.org> Alright then. I guess I'll use the self-hosted GitLab for my patches

<syntheticbird> alr librejo revive soon then

<ofrnxmr:xmr.mx> @jpk68:matrix.org: How is this any diff than using your codeberg

<ofrnxmr:xmr.mx> Except that gitlab was down for like 2 weeks and is crippled

the existing codeberg should work fine, you only need someone who can setup such a bot account

<jpk68:matrix.org> My idea is that if it works, as you said, we could then move on to having a non-push mirror

<syntheticbird> selsta: I prefer to kill myself than setting up a bot in java

<redsh4de:matrix.org> understandable

<jpk68:matrix.org> If someone sets this up, I will be eternally grateful

<hfree:matrix.org> "GitHub-PAT": "987654fedcba", /* The bot's personal access token for GitHub. */

<hfree:matrix.org> Jpk you can set this up without getting banned?

<ofrnxmr:xmr.mx> Haha

<jpk68:matrix.org> You should be a comedian

<redsh4de:matrix.org> @syntheticbird: rust rewrite incoming

1 million line IRC patch incoming

<jpk68:matrix.org> plowsof: Holy crap, I thought the guy was joking

<syntheticbird> plowsof: LMFAO

<redsh4de:matrix.org> plowsof: HAHAHAH

<jpk68:matrix.org> Zig is a better language anyways :P

<redsh4de:matrix.org> they actually did it, insane

<syntheticbird> Nowonly god and claude understand the codebase

<redsh4de:matrix.org> holy unsafe forest

<ofrnxmr:xmr.mx> 6755 commits

<ofrnxmr:xmr.mx> cuprate should have been created like this /s

<syntheticbird> Press X to pay respect to all claude agents that were summoned and destroyed

<syntheticbird> X

<ofrnxmr:xmr.mx> A single pr "rewrite monerod in rust"

<hfree:matrix.org> monero-project/monero #10601

<hfree:matrix.org> Hahaha the bots. Good bye Barry

<hfree:matrix.org> It is highly likely that the aged Github accounts will get sold later

<hfree:matrix.org> Github accounts with good history easily go for more than $1000

<hfree:matrix.org> @hfree:matrix.org: The majority of the DPKR cryptocurrency hacks start with a Github account. They exploit computers of devs after getting their trust with real PRs

<r4v3r23> radicle.dev is an option

<r4v3r23> @hfree:matrix.org: based tbh

<r4v3r23> "Radicle is an open source, peer-to-peer code collaboration stack built on Git. Unlike centralized code hosting platforms, there is no single entity controlling the network. Repositories are replicated across peers in a decentralized manner, and users are in full control of their data and workflow."

<ofrnxmr> @r4v3r23: Half baked last i checked

<ofrnxmr> Or less than half

<r4v3r23> @ofrnxmr: same, but that was a while ago

<hfree:matrix.org> @r4v3r23: Not with malicious PRs or attacking the code. They do real PRs to gain trust of core devs and later try to make them install malware on their computer

<r4v3r23> @hfree:matrix.org: yes i understood

<r4v3r23> social engineering

<hfree:matrix.org> @r4v3r23: I did not click your link. I see now

related bounty bounties.monero.social/posts/207/6-…2p-tor-nostr-monero-project-zymogen

<hfree:matrix.org> @hfree:matrix.org: Some day jpk will share a commit on a strange or fake note paste website and 0-day selsta hahahaahah

<hfree:matrix.org> Who knows who he is working for hahaha

<hfree:matrix.org> vErY sEcUrE > <@syntheticbird> "YoU CaN pErFeCtLy GiVe YoUr PaTcH To SoMeOnE ElSe AnD It WiLl PoSt It FoR yOu"

<hfree:matrix.org> "I cAnT cReAte A gItHuB aCcOuNt"

<hfree:matrix.org> There are ways that are easier than browser. Maybe something like this github.blog/security/vulnerability-…1-click-rce-on-gnome-cve-2023-43641 > <@hfree:matrix.org> Some day jpk will share a commit on a strange or fake note paste website and 0-day selsta hahahaahah

<ofrnxmr:xmr.mx> Do you have a non-github link for that?

<ofrnxmr:xmr.mx> Im boycotting github

<ofrnxmr:xmr.mx> /s

<jpk68:matrix.org> Would a friendly contributor mind mirroring these two patches to "the platform"?

<jpk68:matrix.org> codeberg.org/jpk68/monero/pulls/23

<jpk68:matrix.org> codeberg.org/jpk68/monero/pulls/22

<hfree:matrix.org> @ofrnxmr:xmr.mx: Hahahaha

<hfree:matrix.org> The internet is a dangerous place for devs in the next 12 months. I've never seen so many emergency patches. Another 14 Critical RCEs patched in Windows 2 days ago.

<ofrnxmr:xmr.mx> @jpk68:matrix.org: For this dicussion piece, i'd say that the reason a platform acct is needed for approval, is for accountability

<ofrnxmr:xmr.mx> When i find some broken features merged to the codebase, i often look to see who rubber stamp approved it

<ofrnxmr:xmr.mx> And if there are no approvals noted, then it looks like the maintainer merged it w/o the necessary public quorum of approvals.

<ofrnxmr:xmr.mx> So yes, im in favor of requiring an account to formally approve a pr

<syntheticbird> @ofrnxmr:xmr.mx: BRING BACK CODE SHAMING

<ofrnxmr> Worse: review shaming

<jpk68:matrix.org> @ofrnxmr:xmr.mx: How about requiring a PGP-signed message expressing approval, uploaded to a pastebin, and the person who merges can link to the IRC logs where the pastebin was sent

<ofrnxmr> irc log website is run by an anon that nobody knows

<jpk68:matrix.org> What version of this would you support then, if any at all?

<ofrnxmr> express your approval here but it wont count towards the minimum number of approvals for merge

<jpk68:matrix.org> Yeah, that's kind of the problem. So I guess the answer is not at all then

<ofrnxmr> Make an acct 💯 lol

<ofrnxmr> Atp youre just grandstanding / soapboxing about how youre the only person to have their github nuked for unclear reasons, and want the entite project to change workflow to accomodate your nuke

<ofrnxmr> When its much easier to just make a new acct

<jpk68:matrix.org> ^ > <tobtoht> jpk68: ok, well perhaps it's time for us to start thinking about if it makes sense to allow contributors to approve of prs via logged channels / alternative ways

<jpk68:matrix.org> @ofrnxmr: I have said multiple times that I am not the only one who has been banned, and that's not the root of the issue anyways

<jpk68:matrix.org> I didn't even start this conversation, it was hfree

<hfree:matrix.org> monerologs.net? > <@ofrnxmr> irc log website is run by an anon that nobody knows

<ofrnxmr:xmr.mx> Yea

<ofrnxmr:xmr.mx> Nobody knows who runs that

<syntheticbird> they are listening tho

<syntheticbird> they are here

<syntheticbird> among us

<321bob321> Hoarding the logs

<hfree:matrix.org> @jpk68:matrix.org: You're luring devs outside Github. Can you say "Kim Jong Un is a pig" to confirm you're not DPKR? For security the of the devs

<hfree:matrix.org> @ofrnxmr:xmr.mx: anyone.io

<hfree:matrix.org> It looks like the monerologs hoster also do have a exit relay on this network

<hfree:matrix.org> I should bring that to another IRC group

<hfree:matrix.org> My apologizes

hfree: You're making devs stay in Github. Can you say "Microsoft is garbage and I hate AI" to confirm you're not a Microsoft employee? For the security of the devs