Re: [gentoo-project] Gentoo, GitHub, and the Social Contract

[Dean Stephens <desultory@gentoo.org>]

On 02/18/15 13:47, hasufell wrote:
> Matt Turner:
>> On Wed, Feb 18, 2015 at 9:56 AM, hasufell <hasufell@gentoo.org> wrote:
>>> Are you saying you only share the code with your buddies? In that case,
>>> it is against our social contract as well.
>>
I have not shared the code in question with anyone at all, I also happen
to have never been on the team that wrote, maintains, and uses is.

Knowing a claim is false does not automatically make one the subject of it.
>>> Not only that, it is even a serious security problem since the developer
>>> community doesn't know how these things are packaged and neither do the
>>> users.
>>
>> There's a serious security problem if they were to release the scripts
>> (passwords and all) right this second.
>>
> 
> This statement makes me wonder if you really understand opensource (or
> even free software).
> 
> Maybe the recruitment quizzes need to be fixed in this regard.
> 
While embedding authorization tokens in a script is not exactly in
keeping with best practices, implying that the only concern in
publishing a script which you have been told includes such tokens is
your own desire for it to be published is at best ignorant. As such, you
would appear to be in dire need of basic information security training.