71–80 of 203 posts
Earlier quoted context omitted.
I'm not on their payroll, and I'd already fixed the CVE upstream over a year ago , so no.
I have no intention of getting into an argument with you but wow, you must be having a bad day. I wonder if you would have gotten a different response to your report if you'd taken a different tone with the people trying to understand the issue itself.
Earlier quoted context omitted.
I'm not on their payroll, and I'd already fixed the CVE upstream over a year ago , so no.
You took the time to go search through those repos, and then took the time to come here and point out your findings. You could have easily just copy pasted what you wrote here into an Issue on those repos. It would have helped out your government, made these projects a tad bit better, and taught a few developers something they'll remember in the future when they write more software for the government. It's part of th…
Earlier quoted context omitted.
> Since GitHub is for open-source projects, it also meant that any user could submit a request to modify the code and impact Trump’s website, if the change was approved by the plug-in’s author, a developer in Lisbon named Igor Escobar." That's how it works for any open source project you use, regardless of where it's been hosted. Unless you review the entire codebase (as well as all changes made in new releases), you…
I agree it's overblown (based on the article). Was it sourced from a particular SHA or a "latest" link?
This still wasn't a good idea, but for a different reason - it's relying on the demo at https://igorescobar.github.io/jQuery-Mask-Plugin/ continuing to exist, and continuing to host the plugin at that same path.
Most of the code looks fairly dull and single-purpose. Except NASA's code, as you may expect. Trick and OpenMCT both look at least interesting, and OpenMCT in particular could be used as the basis for many an interesting web-based project.
Earlier quoted context omitted.
They said what they think the point is in what you quoted: "to collect and respond to feedback..." I can see why you might not like it, or not agree with it, but it's not like they didn't say it!
My feedback would be a FOIA request for commerce.gov's API code, and a PR to add it to their repo.
"computer software, including source code, object code, and listings of source and object codes, regardless of medium are not agency records"
Earlier quoted context omitted.
My feedback would be a FOIA request for commerce.gov's API code, and a PR to add it to their repo.
You can't make an FOIA request for code. You can only make requests for agency records , and in the definitions section of the bill, computer code is explicitly listed as something that isn't an agency record. "computer software, including source code, object code, and listings of source and object codes, regardless of medium are not agency records"
Earlier quoted context omitted.
You can't make an FOIA request for code. You can only make requests for agency records , and in the definitions section of the bill, computer code is explicitly listed as something that isn't an agency record. "computer software, including source code, object code, and listings of source and object codes, regardless of medium are not agency records"
Works created by the federal government are in the public domain, per section 105 of the copyright code. So you'd be right I can't use a FOIA request to obtain the code, but if obtained through other methods, I believe I'm in the clear for hosting it on Github.
I admire the work that 18F is doing, and live in the DC area, even contracted for the government early in my career -- but I can never go back. I just fundamentally disagree with the security clearance apparatus is in place and never want to subject myself to that again. Especially when purely private companies pay more and don't care what you do in your personal time. Working for the government felt like being a chi…
What was so bad about the security clearance aspect?
Horrible name - the Federal Government of the United States is not "the People".