@[email protected] to [email protected] • 1 year agoGitHub Is Not Open Source, A Rantlisted.toexternal-linkmessage-square112fedilinkarrow-up1177arrow-down145
arrow-up1132arrow-down1external-linkGitHub Is Not Open Source, A Rantlisted.to@[email protected] to [email protected] • 1 year agomessage-square112fedilink
minus-square@[email protected]linkfedilinkEnglish2•11 months agoThat’s not a pull request, but a merge request. Besides the point though. What I’m getting at is: isn’t that asking for trouble? Somebody could while true ; do head /dev/urandom -c 100MB > file.txt git add file.txt git commit -m "new commit" git push done and fill up your hard drive. Also, depending on the protocol, they could try fuzzing it. Or, pipe /dev/urandom into nc and blast your git port. And of course, the first problem is discoverability. Who’s going to find your random, unfederated, git service? It just doesn’t sound like a convincing solution, IMO. Anti Commercial-AI license
minus-squarelurch (he/him)linkfedilink1•11 months agono, it’s not specific to merge requests. theres a tool called git-shell that prevents abuse
That’s not a pull request, but a merge request. Besides the point though. What I’m getting at is: isn’t that asking for trouble? Somebody could
while true ; do head /dev/urandom -c 100MB > file.txt git add file.txt git commit -m "new commit" git push done
and fill up your hard drive. Also, depending on the protocol, they could try fuzzing it. Or, pipe
/dev/urandom
intonc
and blast your git port.And of course, the first problem is discoverability. Who’s going to find your random, unfederated, git service?
It just doesn’t sound like a convincing solution, IMO.
Anti Commercial-AI license
no, it’s not specific to merge requests. theres a tool called git-shell that prevents abuse