Earlier quoted context omitted.
Getting a quote from The Clash from the US Government, that's actually pretty awesome.
The Clash?
The past.
The People's Code
101–110 of 203 posts
Re: The People's Code
#102Earlier quoted context omitted.
What was so bad about the security clearance aspect?
They want to know deeply personal details about your life, show up at your neighbour's and friends doors to question them, have explicit control over where you can travel on your vacation, deeply care about what you do in your free time, and mishandled all of it -- all in the vague guise of preventing blackmail and sabotage. The blackmail and sabotage argument, as near as I can tell, is a farce because our enemies an…
Man, and I though Snow Crash's portrayal of the feds was wildly exaggerated.
Guess it was significantly less exaggerated that I thought.
Re: The People's Code
#103Earlier quoted context omitted.
I have no intention of getting into an argument with you but wow, you must be having a bad day. I wonder if you would have gotten a different response to your report if you'd taken a different tone with the people trying to understand the issue itself.
> if you'd taken a different tone I've been thinking about this a lot lately....I think "why didn't you just use a different tone" is very similar to how people that grew up in environments where everything went right when they say to people struggling "why don't you just do x,y,z". The problem is, they don't know how .
I agree, but with a little twist: the problem is not that the latter party doesn't know how and the former party has the answers, maybe it's that the former party doesn't know how either.
In this particular instance, the actual problem is notification. OP said he fixed the bug in his original code, and one of his downstreams should fix the bug too.
Fair enough.
But then things took a turn towards "you should do the work", "civic duty", and what not. To which OP replied he's not going to fix it in a code base he's not compensated for.
The actual problem in this scenario here isn't OP's willingness to donate his time, it's that the right person at the downstream needs to be notified (and in turn acknowledge the problem). And in the world of open source, this is a common issue which is impacted by multiple notification avenues, developer continuity, and general infosec policy.
But instead of any one of us creating an issue saying "Hey dudes, this was fixed in the upstream -- here's a copy-and-paste pointing to the fixed and respective vulnerable code", it's a pile-on with holier-than-thou mantras regarding why OP should do the free work of reading the source code, testing a fix, and creating a patch.
Re: The People's Code
#104Earlier quoted context omitted.
The Clash?
The Clash. https://www.youtube.com/watch?v=KsS0cvTxU-8
"I Fought the Law" is a song written by Sonny Curtis of the Crickets and popularized by a remake by the Bobby Fuller Four, which went on to become a top-ten hit for the band in 1966 and was also recorded by the Clash in 1979.
Re: The People's Code
#105They already have some Swift projects [0], which I think is kind of cool. Not sure I would want to use code named "Bro" or "Conman" though. lol. [0] https://code.gov/#/explore-code/agencies/DOL [1] https://code.gov/#/explore-code/agencies/DOE
Bro is actually already a widely used and incredibly popular piece of software. However, I don't think the main branch is developed by the US government, so this may be the DOE trying to dodge the law.
Re: The People's Code
#106Earlier quoted context omitted.
I'm not on their payroll, and I'd already fixed the CVE upstream over a year ago , so no.
You took the time to go search through those repos, and then took the time to come here and point out your findings. You could have easily just copy pasted what you wrote here into an Issue on those repos. It would have helped out your government, made these projects a tad bit better, and taught a few developers something they'll remember in the future when they write more software for the government. It's part of th…
Reporting issues to a vendor takes a hell of a lot of effort and time compared to idly posting them in a comment thread.
This is like those remarks along the lines of "it only takes 5 minutes to submit a patch to the documentation". No, it doesn't - it takes 5 minutes to write it and create a PR, and usually two hours to defend it from the maintainer's criticisms.
Re: The People's Code
#107Earlier quoted context omitted.
What was so bad about the security clearance aspect?
They want to know deeply personal details about your life, show up at your neighbour's and friends doors to question them, have explicit control over where you can travel on your vacation, deeply care about what you do in your free time, and mishandled all of it -- all in the vague guise of preventing blackmail and sabotage. The blackmail and sabotage argument, as near as I can tell, is a farce because our enemies an…
They need to stop showing up at neighbors doors.
My neighbor was supposedly applying for a federal job that required clearance.
These people would come by, and try to talk to me.
I had no idea who they were. I didnt want to talk to them. I thought they were a creditor of mine.(need to finish a chapter 7).
Anyways, one left a little note, and I finally figured out who they were--I think? I wouldn't put it past a slimy process server?
What am I suspose to tell the Feds about a neighbor who moved in a few months ago. I don't even know my long term neighbors, nor really care to?
The federal government needs to realize people don't know their neighbors like they did in the past; or if you happen to find a nosey one--you do not want their assessments. "I think I smelled the devil's lettuce?" "Their dod pooped in my yard?" "I don't like his old truck."
If this is how they do backround checks, NSA is not doing a good job. I don't like NSA, but use that information if it's just sitting around on a server?
Re: The People's Code
#108"The Federal Source Code Policy is designed to support reuse and public access to custom-developed Federal source code. It requires new custom-developed source code developed specifically by or for the Federal Government to be made available for sharing and re-use across all Federal agencies. It also includes an Open Source Pilot Program that requires agencies to release at least 20% of new custom-developed Federal s…
[deleted]
Re: The People's Code
#109Earlier quoted context omitted.
That is...most jobs. Unless I'm not understanding your meaning. Many jobs will fire you for, say, getting a DUI or getting arrested for drug possession or something. And many employers do drug testing. But realistically, a "limited sub-selection of possible activities" is just about everything everyone else can do, except maybe go to Cuba or smoke pot, the latter of which will get one fired at many non-government pla…
Is drug testing always legal in the US? Can drug use on weekends get you fired for any job? I lived in several European countries, and as far as I know there's no way an employer can force you to take a drug test, with the exception of people handling heavy machinery. If you are on drugs while you're at your job this will of course have consequences, but a drug test that would reveal drug use in your free time is not…
Yes--it's legal.
Every construction worker, government worker, anyone who set foot on Pac Bell Ball Park in San Francisco during construction was drug tested.
(It became lax after the first few months. I was worried because I'm on clonezepam. Been on it forever. I think they were more concerned with illegial drugs? I was send home my first day because I wore tennis shoes. I hated that job. My initials are on the top side of all the cherry wood player's lockers. One the top of the wood--only when they it down will they see my initials.)
Re: The People's Code
#110Earlier quoted context omitted.
My feedback would be a FOIA request for commerce.gov's API code, and a PR to add it to their repo.
You can't make an FOIA request for code. You can only make requests for agency records , and in the definitions section of the bill, computer code is explicitly listed as something that isn't an agency record. "computer software, including source code, object code, and listings of source and object codes, regardless of medium are not agency records"
That sounds like something that you might be able to get your congressperson interested in changing, if you pitched it the right way.