this post was submitted on 08 Feb 2025
178 points (97.3% liked)
Actually Infuriating
441 readers
1 users here now
Community Rules:
Be Civil
Please treat others with decency. No bigotry (disparaging comments about any race, ethnicity, religion, gender, sexuality, nationality, ability, age, ). Personal attacks and bad-faith argumentation are not allowed.
Content should be actually infuriating
Politics and news are allowed, as well as everyday life. However, please consider posting in partner communities below if it is a better fit.
Mark NSFW/NSFL posts
Please mark anything distressing (death, gore, etc.) as NSFW and clearly label it in the title.
Keep it Legal and Moral
No promoting violence, DOXXing, brigading, harassment, misinformation, spam, etc.
Partner Communities
- Mildly Infuriating
- Furiously Infuriating
- Memes
- Political Memes
- Lemmy Shitpost
- Not The Onion
- You Should Know
- Lemmy Be Wholesome
founded 1 month ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
The article doesn't say what he did, only that he had write abilities. Did he use them? How do we know? If yes, what were they specifically?
He could push directly to main/prod, so there weren't explicitly any code reviews or necessarily oversight. Also, that code would be private. Only an insider with repository access could tell us that.
That said, I also want to know. I'm guessing we'll hear about it soon enough.
"could" doesn't mean "did"?
True. But there's zero reason to give permissions that reckless unless you plan on using them.
Not really? Every single maintainer / owner of a repository can do that. The only thing stopping them is protecting a branch. And even that isn't a thing in git, it's just something that providers like github or gitlab did to prevent people accidentally pushing to main like that. So they got maintainer access and that's the entire story?
Josh Marshall, the reporter from Talking Points Memo asserted that he did push changes.
Does he provide sources or a way to confirm what he says? I'd like to find out exactly what is known and what is the status of that code base.