Post Aac3QfBQcf6jOYI0PY by thendrix@social.hendrixgames.com
(DIR) More posts by thendrix@social.hendrixgames.com
(DIR) Post #Aabsrc6D6AOq9WUsHQ by linear@nya.social
2023-10-10T00:09:02.648Z
2 likes, 2 repeats
it would be nice if it were actually as easy to contribute to free/open source software as the developers and maintainers of such software claim it isbut meritocracy is a lie, and bullshit policies and procedures (see: "real name" policy) scare away minorities who might otherwise do important work
(DIR) Post #Aabsrckcfuj4ArP9Gq by purple@nya.social
2023-10-10T00:17:27.306Z
0 likes, 0 repeats
@linear using github is a hard no for me. so, unless they list an email address, it probably aint happening.this brings us back to "we need a new Freshmeat".
(DIR) Post #AabtrGsw4WLCJQgkr2 by linear@nya.social
2023-10-10T00:21:30.093Z
4 likes, 8 repeats
i have outright deleted a major patchset i wrote for a project under freedesktop.org stewardship, which someone else is probably going to write again in a year or two, because i realized the project had a real-name policy, and decided it wasn't worth it. i then lost motivation for the cool thing i was working on that needed me to write that patchthis is not the intended effect of a "real-name" policy, but it is the actual effect. and, as the cool kids say, "the system is what it does".there is no such thing as a "real name". the concept of a "legal name" is fraught, and most certainly is not what you think it is, or what you are looking for, if you are a software developer. many assumptions you have about what a "legal name" is probably are not true.consider this: the name on my birth certificate is different than the name on my drivers license, and that is different from the names i am called by my friends. those names are all different from what is likely to be on my passport when i get it, and all of those are different than the name i publish my open source projects under. all of these, in different jurisdictions, might or might not be something you could consider a "legal name". which one do you want me to use when i submit a major feature to your library? are you going to turn me away if i try to submit it as "linear cannon"? why? if i have a website and contact information under that name, why does this matter? how is it substantially different than an author of fiction novels publishing under a pen name? does it change if i produce a piece of government-issued documentation with that name on it? why, or why not?if your real name policy does not answer these questions adequately, then there's a very good chance i'm just going to assume that you're going to turn me away, as has happened to me several times already
(DIR) Post #AabuCXKU7xVhOXiMmO by Moon@shitposter.club
2023-10-10T00:32:26.351127Z
0 likes, 0 repeats
@linear it's probably for documenting copyright assignment
(DIR) Post #Aac3KS9g9FwpFdVfjU by linear@nya.social
2023-10-10T00:39:03.085Z
0 likes, 0 repeats
@Moon@shitposter.club yes. it is. that doesn't address any of the questions i posed, though. which "legal name" of mine is it that you want, and why? how is me submitting under the name "linear cannon" any different than an author writing a book under a pen name?
(DIR) Post #Aac3KSongMqDJAkVpQ by Moon@shitposter.club
2023-10-10T02:14:41.260278Z
2 likes, 0 repeats
@linear i'm using a pseudonym right now and funny enough more of my loved ones use this name for me than my legal name and i wouldn't do it either so i sympathize with you. i wrote up a reply but i realized i don't want to be a busybody in your earnest thread, so sorry.
(DIR) Post #Aac3QfBQcf6jOYI0PY by thendrix@social.hendrixgames.com
2023-10-10T02:15:51.424036Z
0 likes, 0 repeats
Death threats are part of the fun?
(DIR) Post #Aac5bbU8ud0Z1FO54a by adamshostack@infosec.exchange
2023-10-10T01:04:55Z
0 likes, 0 repeats
@linear @irenes The US office of science and tech policy has an open call for comments about the future of open source security. I want to encourage you to tell them about your choices so they don’t randomly default to “of course wallet names are a fine thing”
(DIR) Post #Aac5bcOVX45vq3l5vc by linear@nya.social
2023-10-10T01:06:17.205Z
1 likes, 0 repeats
@adamshostack@infosec.exchange @irenes@mastodon.social thank you for this information
(DIR) Post #Aac5bcthf533OoM0YK by adamshostack@infosec.exchange
2023-10-10T01:05:48Z
0 likes, 0 repeats
@linear @irenes https://www.federalregister.gov/documents/2023/08/10/2023-17239/request-for-information-on-open-source-software-security-areas-of-long-term-focus-and-prioritization
(DIR) Post #Aac5gv1rfyT756h9oO by irenes@mastodon.social
2023-10-10T01:07:06Z
1 likes, 0 repeats
@adamshostack @linear we likewise encourage this but we note that the entire framing of "security" as the driver behind why government needs to get involved is corporate and statist, and existing publications about the intent have called for tying everything to legal identity, and we see very little chance that there is going to be a change of direction. still, it's important to register dissent.
(DIR) Post #AacG2ZCKWWblHlYFFY by tyil@fedi.tyil.nl
2023-10-10T04:37:10.182Z
1 likes, 0 repeats
@linear@nya.social Back in my day it was just "yeah sure just send me an email with your patch", and I still use that methodology. But I agree that nowadays the norm is "yeah you must accept our license, our terms, our CoC, you must use this specific platform in this specific way, and we have a bot to automate it so learn that syntax too pls". I don't think I've seen a project require a real name to be used yet, but I wouldn't be surprised if this is a real thing.All in all, #GitHub and all its "features" have been a disaster for the development community.
(DIR) Post #AacGXB8k1JUneGTBAG by linear@nya.social
2023-10-10T04:41:35.797Z
1 likes, 0 repeats
@tyil@fedi.tyil.nl for ages, linux itself required this, several linux distributions required (and may still require) this, and many of the major software components found on a linux system also had such a policy - even if across all of these it may not have been particularly enforced.but enough of them enforced it for me, that i ultimately began to infer that such a policy means i am unwelcome
(DIR) Post #AacGiopulpR5wxDL3g by tyil@fedi.tyil.nl
2023-10-10T04:44:48.581Z
0 likes, 0 repeats
@linear@nya.social I know a troon that contributed to the Linux kernel with his fakename, so I didn't know they required a real name at all. I've contributed to smaller projects myself, and it didn't seem a problem there either. Sorry to hear such a policy is such a big requirement these days.
(DIR) Post #AacbqMCtCD5KVlOcVM by icedquinn@blob.cat
2023-10-10T08:41:28.572232Z
0 likes, 0 repeats
@linear there seems to be some consistent opinion that doxing yourself will lead to better behavior (somehow.) i'm not aware that it actually works. i've ignored attempting to contribute to Zrhythm for having the same policy.
(DIR) Post #Aacbr8DwfaRzQwG8oa by newt@stereophonic.space
2023-10-10T08:41:14.645572Z
2 likes, 0 repeats
@linear just invent some bullshit name and go with it. I send patches under Chad Thundercock and nobody complains!
(DIR) Post #AacylJBbIVwEdlM4Ce by ignaloidas@not.acu.lt
2023-10-10T12:58:16.630Z
1 likes, 0 repeats
@linear@nya.social tbh what's infuriating about names is that even when as a programmer you understand the peculiarities of them as they relate to your specific application, you end up needing to bring dumb workarounds just because others have dumb misconceptions about them. E.g. when building a system that dealt with ID documents, we ended up needing to accept and return names in a very confused format with first and last names as separate fields and stuff, while most documents don't really differentiate them strongly - at least in ICAO compliant documents there's just a Name field, which might have a separator marking that it has more than one part, but it also might not - mononyms are common in some parts of the world.But trying to convince others of that is hard, and it made more business sense to just have two fields, even though it's wrong.
(DIR) Post #Aad34XqDQyqHPXmRiy by samueldr@ap.samueldr.com
2023-10-10T01:55:29.079697Z
0 likes, 0 repeats
@linear it's even worse when considering it's not even required (AFAIK) for holding copyright...... and also sometimes people are most well-known as their aliases. We should normalize people having "internet names" (for a lack of a more generic framing), not unlike stage names for actors.There's a developer with the name Bob Bobson? Sorry, you have to pick a new name to work publicly as.
(DIR) Post #Aad34YpXkxtmTkTQJc by thatguyoverthere@shitposter.club
2023-10-10T13:46:34.182239Z
0 likes, 0 repeats
@samueldr @linear Bob Bobsonson
(DIR) Post #Aad34ZkyJRptLrLHpQ by samueldr@ap.samueldr.com
2023-10-10T01:57:44.491995Z
0 likes, 0 repeats
@linear Oh, and without holding documented proof of it being the real name of the person, it's soooooo worthless. Nothing prevents anyone here from contributing as the fictitious *Jared Jones*, as long as it looks "normal" it'll end-up going through I suspect.
(DIR) Post #AadRFiRCm4VOMRwQnQ by sima@chaos.social
2023-10-10T07:13:43Z
0 likes, 0 repeats
@linear I'm on the board of that org, and we shouldn't have this. but it's a bit complicated1. drm subsystem never enforced the real name policy, and @airlied and me as subsystem maintainers put that on record https://lore.kernel.org/dri-devel/CAKMK7uG+TeATXctJaXBgSRxpinDdtOhGa+o2CMPaPtO1QyHtJA@mail.gmail.com/it's now also officially fixed for the kernel overall https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d4563201f33a022fc0353033d9dfeb1606a883302. some projects require the https://www.developercertificate.com/ and there's the common misconception that this requires a "real name". it doesn't, and never has1/2
(DIR) Post #AadRFjTMvVpXZRxfo8 by sima@chaos.social
2023-10-10T07:15:34Z
1 likes, 0 repeats
@linear @airlied 3. if we do have projects that have a real name policy in their docs or require it, we need to fix it because that just flat out violates our CoC and values as an org. I'd much appreciate if you can reach out (in private if you prefer) so we can sort this out
(DIR) Post #AadRK2MscGHpKdylGK by jani@fosstodon.org
2023-10-10T09:45:37Z
1 likes, 0 repeats
@sima @linear @airlied On a related note, in most cases any real name policy just crumbles when you realize how difficult it is to actually enforce in practise. Usually it becomes a "name that seems plausibly real to some group of people with a certain cultural background policy".
(DIR) Post #AadRPf2OGsGaiA4pHM by JessTheUnstill@infosec.exchange
2023-10-10T16:43:12Z
1 likes, 1 repeats
I think that the underlying desire in real name contributor policies is being able to define a chain of trust that this specific piece of meat is tied to this specific identity. Which I understand that desire. If you're trying to fight fraud and abuse, not to mention various legal liability and regulatory requirements, you want to have that identity to have a meaningful connection back to an actual specific oxygen consuming anxiety generator. The problem, as you point out, is that a "legal name" is not a catch all linkage between one feces producer and an identity. Oh sure, it works in many cases for people who are born and die with the same exact name, and aren't generally faced with harassment and abuse for that name being public information. That is traditionally ... cis men ... Which is the solution they've chosen to solve for.Instead, there needs to be a more inclusive consideration of how to link an identity to a specific conglomeration of synapses - one that accepts that some people require pseudonyms, and that some peoples' identity relationship with governments can be complicated at best and adversarial at worst. @linear
(DIR) Post #AadRPg9s6XqSBeaJZw by JessTheUnstill@infosec.exchange
2023-10-10T18:14:29Z
0 likes, 0 repeats
Some possibilities I can think of would include: a link to a public talk that's recorded somewhere where your identity is clearly stated or presented in the slides - this could be your pseudonym, your GitHub handle, email address, or whatever else you want to be your identity denominator.Have a recorded Zoom call with a project maintainer where you state your identity and do a few things that are still hard for deep fakes. Turn your head back and forth on request, stick your tongue out, speak a given set of nonsense string of syllables, whatever.Submit to the maintainers a scanned signed statement saying "I, (legal name), am the same person as the online identity (pseudonym) that they can keep on file somewhere.Idk, have a variety of options for people.@linear
(DIR) Post #AadbQDwLVHbSV89m1g by vv221@fediverse.dotslashplay.it
2023-10-10T20:11:17Z
0 likes, 0 repeats
Come contribute with us to ./play.it ;)As you can see, we accept anything for the license attribution: http://git.dotslashplay.it/scripts/tree/LICENSEThere are "civil" names, pseudonyms, initials, with our without a contact e-mail, whatever the contributor chose at the time of their contribution. We even do changes to this when requested by a contributor (the favourite form of address for a same person can change over time).
(DIR) Post #AaeSKT3hfuM3DwjqWO by johnny@chaos.social
2023-10-10T22:56:48Z
0 likes, 0 repeats
@tyil @linear You know a what now?
(DIR) Post #AaeSKTgLMFGN9mohkW by linear@nya.social
2023-10-10T23:20:59.595Z
0 likes, 0 repeats
@johnny@chaos.social @tyil@fedi.tyil.nl i think he's trying to be transphobicawfully pathetic tbh. not being able to acknowledge that a trans person exists without resorting to slurs is pretty cringe
(DIR) Post #AaeSKUOIioQPM7NoGW by tyil@fedi.tyil.nl
2023-10-11T06:04:15.088Z
0 likes, 0 repeats
@linear@nya.social @johnny@chaos.social A man is a man, no matter how much effort he puts into mutilating his body. You can call it "transphobic" if you want, I'm just too autistic to be swept away into believing something that is clearly and visibly not true.
(DIR) Post #Aaf7PrWeEPVGfuy4vY by gelato_al_pollo@puntarella.party
2023-10-11T13:38:24Z
0 likes, 0 repeats
@ignaloidasAre you referring to ICAO passports? Because they have primary and secondary identifiers, as far as the standard goes, and plane tickets assume the name to be composed by two fields, too.@linear
(DIR) Post #Aaf7Q0rBXQHLcDe6gi by ignaloidas@not.acu.lt
2023-10-11T13:44:38.258Z
0 likes, 0 repeats
@gelato_al_pollo@puntarella.party @linear@nya.social Not in MRZ, they don't. Yes, there is a genneral assumption of a second field, but it is noted that there might not be any. See ICAO 9303 Part 3 section 3.3
(DIR) Post #Aai0F40FNrnPyzb1w8 by tusooa@kazv.moe
2023-10-12T23:08:17.724792Z
0 likes, 0 repeats
@linear I have been deferred from contributing to Gentoo portage repository just because of this. I refuse to "sign off" using a "real name."Which is fine, I guess.Until someone took my patch for KIO ( https://invent.kde.org/frameworks/kio/-/commit/0a13e0a3e830be2b2b2e5c2c6cf8cef25bd68bd8 ) and put it into the Gentoo repository as upstream patches ( https://github.com/gentoo/gentoo/commit/76fbe81975afdff600e155569bca6a5b522c915b ). Well... And they accepted that without problems, apparently because the one who ported that patch is willing to sign off with their "real name." I think the whole thing is just absurd.