Post

Asking the question is fine, but I’d say it is entitled to think the maintainer HAS to answer you.

Also, I'm not sure if this is correct, but it seems like the github account who announced the move and nuked the commit history wasn't one of the previous maintainers, making is seem quite a bit more suspicious.

I think part of the problem here is the nature of large distributed communities on the web. Where even if 99.9% of the rust community is reasonable and polite, in a community with 100,000s of people there are still hundreds of assholes. And it only takes one dedicated asshole to ruin someone’s life

For sure, I don’t think that stuff is reasonable at all.

And posting addresses is beyond the pale of course

man those comments are atrocious

To clarify the context of my prev comment: I am not familiar with the Doxxing or Git History rewrites; my perspective is as a heavy bincode user who noticed some warning signs over the past few months. I have been mentally prepared for this, but don't intend to immediately switch dependencies.

I use Bincode on a few large projects. Will keep using for now, but have been on the lookout for a replacement for a while now. There were several [to me] red flags regarding discussions over Chrono and Heapless imlementations, and their SourceHut readme. @jamesmunns.com Sounds like PostCard time

Well shit. kudos to the mod for pinning the timeline of what happened for folks like me w/ their heads in the holiday sand, I guess

Doxing? Over a... *checks notes* binary encoder? Really?

As a formerly-happy bincode user, I've been following along with the bincode saga with moderate dismay at the way things are being handled with next to zero communication. But doxxing someone over it? That's absolutely vile behavior.

Wouldn't this fall under legitimate interest, though? Especially since keeping track of contributions is required for some licenses.

In short: it's complicated, but generally rewriting history is bad. If you're an organization that needs to assess OSS dependencies for risk, a major Git history rewrite would likely need to trigger a new audit of that dependency to ensure nothing malicious has slipped in.

It’s suspicious, not inherently wrong. And they rewrite more than metadata, they removed all commits. Still doesn’t justify doxxing but it’s a legitimate thing to *ask* about

(the community where that happened is still contending with the fallout of that incident and it was like a decade ago)

In this situation, a possible better approach would have been to post an issue/note on the GH project with the planned changes first. Hope the maintainer learns from this *despite* the unfortunate circumstance. Again, 100% shitty behavior on these Reddit dox'ers. Not blaming the maintainers.

Yeeesh what a fucking mess

Tbh, I initially can really understand the both side of this. I do think it's reasonable to be suspicious of git history being changed. I draw the line when they started doxxing, truly awful stuff, and what's the point?

This is one of the many reasons I stopped trying to get into software development.

> Real names were posted, familial relations were posted and speculated on, home addresses were revealed. jfc. What a dumpster fire. and then theres people like: > Crate owner throws hissy fit and cries about being doxxed like being upset about that is somehow so outlandish...

I actually don't think the person who did it even intended it badly, they just did not think at all about the implications. But I could read between the lines as soon as bits of info started surfacing just why the author probably wanted privacy and then to see people just continue...blech.

Yikes

Remember The Jia Tan

Or just, like, diff? Everybody wanna be a supply chain security expert but don’t nobody wanna stop putting things they find on the floor directly into their mouths

the delusion i'm currently sticking to is "it's just the subset that comments on reddit, not all of us are like that", but

The prevailing view in that thread seems to be that “doxxing is bad but it’s fine to dig up someone’s whereabouts or contact information so you can contact them privately about code you’re upset about” and, uh, no? What the fuck is even happening