One of the things I hate about open-source is the paranoia that this "pull request" containing a useful update to my code is actually a trojan vuln/backdoor. github.com/robertdavidgra…
This sounds like a really useful feature, but at the same time, is enough code I can't simply press the "accept" button to accept the changes.
I'm tweeting about this because there are legal concerns. Whenever I talk to law enforcement, they demand it's my responsibility to verify that contributors aren't just adding code to help illegal activities.
In other words, demanding I do something like a "background check" for every pull request. Of course, not that far, but would would be the equivalent? In case, I briefly check their github account.
Looks very much like a fellow nerd in cybersec. On the other hand, if this where a North Korea sponsored hacker working to heist $billions from banks, well, they can also look like this.
Anyway, pull request accepted, the code is now updated, and the feature looks really useful and I'm kicking myself for not adding it sooner.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
