Privacy

4099 readers

290 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 2 years ago

MODERATORS

Ategon@programming.dev

danielintempesta@programming.dev

Fuck Github, Microsoft has made it impossible to create an account without linking to hardware or phones (infosec.pub)

submitted 5 hours ago* (last edited 5 hours ago) by cm0002 to c/privacy@programming.dev

12 comments fedilink hide all child comments

Github has made it impossible to create an account when using a VPN and a privacy browser with fully spoofed hardware identifiers. (Use Firefox or Firefox-based Privacy Browser, VPN, install Canvasblocker to test this.) I create an account with Google or Apple (both requiring hardware identifiers and numbers and birthdates) or I can use an email. When I use an email, it comes back with this horrible test, and even if I do it completely correctly, it tells me after I didn't do the test right, gaslighting me with a picture of what I chose (which I didn't choose) and showing me the correct picture (which I did choose and it claims I didn't select).

It's fucking bullshit and it's more corporate control of open source software. For people who have their discussion or issue tracker, I can't even participate without hardware identifiers likely linked to me some other way and phone numbers. It's fucking bullshit. If anyone from Microsoft is reading this, FUCK YOU!!!!!!!!!!

I am so tired of this bullshit. I just want to post an issue about a piece of software. You don't need my fingerprint, hardware or personal, or biometric shit. This is a slippery slope. Fuck them.

I really hope more developers just get the fuck off Github. Honestly, if you are developing privacy-oriented software and using github, there's a mistmatch and it's bullshit, and I know it's time consuming and annoying to move, but please do. This is fucking bullshit and it's not like it's going to become LESS annoying over time. FUCK THIS.

OC by @someone@lemmy.today

top 12 comments

sorted by: hot top controversial new old

[–] DFX4509B@lemmy.wtf 4 points 1 hour ago

Good thing git itself is decentralized and self-hostable. Codeberg/Forgejo exists or you can spin up your own bare git repo.

You don't have to use Github, people, or even Gitlab for that matter as since Gitlab is ran by a for-profit company, it's only a matter of time before they go in the direction of Github as well.

[–] hperrin@lemmy.ca 8 points 3 hours ago* (last edited 3 hours ago)

I’m not sure I would want completely anonymous, unknown, and unaccountable actors to be able to comment, submit issues, and submit PRs on my repos. So, it’s annoying, but the alternative is so much worse.

[–] slazer2au@lemmy.world 9 points 4 hours ago (1 children)

No shit. Have you seen how much threat actors abuse git forges?
If I opened my forge to the internet I would also mandate hardware tokens and block known VPN endpoints.

[–] deadcream@sopuli.xyz 3 points 2 hours ago (1 children)

They should also block linux users and other suspicious people. Lots of hackers and weirdos use linux.

[–] four@lemmy.zip 2 points 24 minutes ago (1 children)

All hackers use computers, so ban those as well

[–] mr_anny@sopuli.xyz 1 points 1 minute ago

Social hackers use humans, so ban those aswell.

[–] degenerate_neutron_matter@fedia.io 5 points 4 hours ago (1 children)

Somewhat unrelated, but wtf is the link you posted? The full (currently broken) link is:

https://infosec.pub/api/v3/image_proxy?url=https%3A%2F%2Flemmy.ml%2Fapi%2Fv3%2Fimage_proxy%3Furl%3Dhttps%253A%252F%252Flemmy.today%252Fapi%252Fv3%252Fimage_proxy%253Furl%253Dhttps%25253A%25252F%25252Fupload.wikimedia.org%25252Fwikipedia%25252Fcommons%25252F0%25252F00%25252F%252525C5%25252581ajno_ko%252525C5%25252584skie_400.jpg

Which, URL decoding the proxied URL, gives you:

https://lemmy.ml/api/v3/image_proxy?url=https%3A%2F%2Flemmy.today%2Fapi%2Fv3%2Fimage_proxy%3Furl%3Dhttps%253A%252F%252Fupload.wikimedia.org%252Fwikipedia%252Fcommons%252F0%252F00%252F%2525C5%252581ajno_ko%2525C5%252584skie_400.jpg

Decoding once again:

https://lemmy.today/api/v3/image_proxy?url=https%3A%2F%2Fupload.wikimedia.org%2Fwikipedia%2Fcommons%2F0%2F00%2F%25C5%2581ajno_ko%25C5%2584skie_400.jpg

And one final time actually gets to the original link: https://upload.wikimedia.org/wikipedia/commons/0/00/%C5%81ajno_ko%C5%84skie_400.jpg

[–] cm0002 2 points 4 hours ago

I've been fighting with the image proxying for days now, I just gave up on this post since the meat and potatoes is the text post itself

[–] tidderuuf@lemmy.world 7 points 5 hours ago (1 children)

People have been saying this would happen since MSFT bought GitHub and gutted it. Where have you been this whole time?

[–] myrmidex@belgae.social 9 points 4 hours ago

Wait till he finds out about Twitter.

[–] hesh@quokk.au -1 points 4 hours ago

I had the exact same struggle this week. I refuse to give up my privacy just to make an account, and after countless tries I've gotten nowhere. If anyone has suggestions to get around this I'd love them.

[–] Jaggs@lemmy.world 0 points 5 hours ago

https://vimeo.com/1168468796