Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Faker.js is now a community controlled project

fakerjs.dev

Post reply on HN
Print view View original

311–320 of 357 posts

Re: Faker.js is now a community controlled project

#311

Post by DonHopkins »

syshum wrote: post #292
DonHopkins wrote: post #182

Earlier quoted context omitted.

Yeah, but most vocal proponents of so-called "individuality" are simply self-centered anti-social assholes who haven't thought through the Libertarian ideologies they parrot deeply enough to realize how extremely dependent on and beneficial from collectivism they actually are, and they continue bitching about "socialism" while sucking the government's tit with their social security and disability benefits and medicar…

>>trucks while "rolling goal" If you are going to insult people at least get the terminology correct, it is rolling coal, not goal. Further most people rolling coal are not libertarian. >>d "individuality" are simply self-centered anti-social assholes who haven't thought through the Libertarian ideologies they parrot deeply enough to realize how extremely dependent on and beneficial from collectivism they actually ar…

Lord forbid I make a typo. But of course you knew exactly what I meant, and despite your attempt to disown that behavior, those people now OWN your precious Libertarian party just as much as they now OWN the Republican party. When your leaders are kissing Trump's ring, and you refuse to renounce and continue to follow those same leaders, you're kissing Trump's ring, too.

Do you support with the way your glorious Libertarian leader Rand Paul has attacked and endangered Anthony Fauci's family by lying about him, and reject the government's right to mandate vaccination, but support spreading lies about people and endangering their families for political purposes? What ever happened to personal responsibility?

https://www.washingtonpost.com/politics/2022/01/12/how-polit...

>How politically helpful have Rand Paul’s attacks on Anthony Fauci been?

>One of the more remarkable political disputes in recent history involves two doctors.

>One is Sen. Rand Paul (R-Ky.), an ophthalmologist by training. The other is Anthony S. Fauci, the federal government’s top infectious-disease expert. The genesis of their fight is the coronavirus pandemic and, specifically, government recommendations (for which Fauci is a figurehead) that Paul opposes. Over the course of more than a half-dozen hearings centered on the pandemic, the fight has become much more personal, with Paul accusing Fauci of having contributed to the creation of the virus and Fauci forcefully pushing back.

>On Tuesday, there was a new escalation. Obviously expecting Paul to challenge him, Fauci came prepared with an argument he hadn’t made previously: Paul was attacking him and putting his personal safety at risk for Paul’s own political benefit.

>Fauci pointed out that a man had been arrested while on his way to Washington to attack a number of public officials, including himself.

>“I ask myself, why would senator want to do this,” he continued, obviously flustered. “So, go to Rand Paul website, and you see ‘Fire Dr. Fauci,’ with a little box that says ‘Contribute here’ — you can do $5, $10, $20, $100 — so you are making a catastrophic epidemic for your political gain.”

And of course there are possible reasons to oppose the ACA, but most of them don't hold any water because they are based on lies ("It's SOCIALISM!!!", "DEATH PANELS!!!"), and are just cover stories and dog whistles for naked racism. You know that as well as I do, so don't play coy and deny it.

Re: Faker.js is now a community controlled project

#312

Post by numbchild »

throwaway858 wrote: post #10

It doesn't feel like there was enough criticism against GitHub for their decision to ban the developer of faker/colors. This was his own corner of the internet for him to publish his own personal projects. I understand the decision for npm to take ownership of his packages, because npm is a community package repository owned by, and for, the community. All community package repositories have some sort of policy for p…

Unbelievable that now almost all people is discussing "how" marak's action caused results. Not try to figure out "why" this happens. Just like seeing something wrong, and discuss it. DO NOTHING!! CHANGE NOTHING. ALL meanless. unless you figure out all stuff, change something. What I do? I think GitHub is wrong, so I take action, delete all repos on GitHub. F*K it, that what I do. At least I have an action. So what you did? Talking is cheap.

Re: Faker.js is now a community controlled project

#313

Post by numbchild »

numbchild wrote: post #312
throwaway858 wrote: post #10

It doesn't feel like there was enough criticism against GitHub for their decision to ban the developer of faker/colors. This was his own corner of the internet for him to publish his own personal projects. I understand the decision for npm to take ownership of his packages, because npm is a community package repository owned by, and for, the community. All community package repositories have some sort of policy for p…

Unbelievable that now almost all people is discussing "how" marak's action caused results. Not try to figure out "why" this happens. Just like seeing something wrong, and discuss it. DO NOTHING!! CHANGE NOTHING. ALL meanless. unless you figure out all stuff, change something. What I do? I think GitHub is wrong, so I take action, delete all repos on GitHub. F*K it, that what I do. At least I have an action. So what yo…

It takes long time to delete them all! I don't like GitHub, so I delete my repos. Is there any problem? I can manage my repos, of course Marak can too. https://twitter.com/numbchild/status/1482625168032022532

Re: Faker.js is now a community controlled project

#314

Post by pull_my_finger »

PragmaticPulp wrote: post #53
mbreese wrote: post #20

Earlier quoted context omitted.

Then you cancel the sponsorships to the project and notify the supporters. When the maintainer effectively cancels the project, this makes sense. But you don’t migrate supporters automatically over to a brand new project (even if it is the most stable fork of the original). > We came to the determination that users unfamiliar with the whole Faker situation wouldn't know that the repository's sponsorship links aren't…

> but you are relying on people (who were never aware of the switch and the new fork) being okay with this, without their consent. Open Collective makes it clear that the sponsorship is for the project, not for a specific person. It's not "without their consent". It's literally the terms of the Open Collective.

> the project, not for a specific person.

The project no longer exists. It was deleted. These people forking it does not give them the ownership of the project. The problem in the supply chain was solved by NPM rolling back the version. Github temporarily suspending his account could be attributed to suspicious behavior. These guys commandeering someone else's open collective and general community identity (hn handle, twitter handle, library name) does not solve any actual problem, and is clearly just an opportunistic way to boost their own standing in the community and financially gain off someone else possibly having a breakdown. Shameless and very unethical.

Re: Faker.js is now a community controlled project

#315

Post by DonHopkins »

outsomnia wrote: post #283
smt88 wrote: post #225

Earlier quoted context omitted.

> It's a bit mind-boggling that FOSS authors who give their work away for free are the selfish baddies This is a straw man. No one made this generalization. Marak, specifically, is a "selfish baddy", and it has nothing to do with FOSS. It has to do with his abuse of Github, npm, and Faker.js (which other people also contributed to ) to distribute malware. None of that can be generalized to a position about FOSS, Micr…

> or any other nonsense you're trying to extrapolate. Sorry you were complaining about straw man arguments?

Yes he was, and you were making them.

Re: Faker.js is now a community controlled project

#316

Post by syshum »

DonHopkins wrote: post #311
syshum wrote: post #292

Earlier quoted context omitted.

>>trucks while "rolling goal" If you are going to insult people at least get the terminology correct, it is rolling coal, not goal. Further most people rolling coal are not libertarian. >>d "individuality" are simply self-centered anti-social assholes who haven't thought through the Libertarian ideologies they parrot deeply enough to realize how extremely dependent on and beneficial from collectivism they actually ar…

Lord forbid I make a typo. But of course you knew exactly what I meant, and despite your attempt to disown that behavior, those people now OWN your precious Libertarian party just as much as they now OWN the Republican party. When your leaders are kissing Trump's ring, and you refuse to renounce and continue to follow those same leaders, you're kissing Trump's ring, too. Do you support with the way your glorious Libe…

>>those people now OWN your precious Libertarian party

I see you have confused the Libertarian party with libertarianism they are pretty different

>>Do you support with the way your glorious Libertarian leader Rand Paul has attacked and endangered Anthony Fauci's

Aside from the complete falsehood of this statement entirly, I do support elected officials grilling non-elected bureaucrats in the manner used by Rand.

I also believe Fauci unfit to serve in his current role and there are serious questions around his tenure that need to be addressed including the funding of the Wuhan lab.

Re: Faker.js is now a community controlled project

#317

Post by pydry »

tptacek wrote: post #309
pydry wrote: post #274

Earlier quoted context omitted.

Breaking a build in a way that is trivially rolled back is not in the same league as pushing code that harvests email addresses, CCs and mines bitcoin. I'm disappointed to see this kind of comparison made.

Deliberately breaking people's applications? It's malware.

Appreciate it can be confusing to the layperson, but a build is not quite the same thing as an application.

A build will often reach out, download and install new and potentially breaking software components and it is part of its function to prevent breaking software components from reaching the application where it could cause material harm.

Re: Faker.js is now a community controlled project

#318

Post by shadowgovt »

encryptluks2 wrote: post #304
bawolff wrote: post #235

Earlier quoted context omitted.

But he didn't withdraw his offering he sabotaged it. I guess the metaphor would be if you gave out free food all the time with a sign saying people aren't entitled to it, and then one day decided to add laxatives to it because you felt the people were ungrateful. Which would land you in jail for a long time no matter what the sign said.

No, the person giving free free food here did not go up to people's houses saying here is free food still, eat it cause it is yummy and safe. The people getting the free food showed up cause they felt entitled, grabbed whatever they could find and said... oh, this isn't the free food that I'm used to getting here... oh, and I forgot to read the sign that has been there all along.

This analogy doesn't work the way you want it to. What you are describing would be literally illegal.

The person who put up the free food and the sign, after it was proven that they willfully poisoned the food (which is the only way I can interpret intentionally encoding an infinite loop in your testing library), would be liable for assault. You cannot just put up a sign that says "taker beware" to indemnify yourself from liability, especially after establishing the pattern that the food is safe.

If you ever wondered why grocery stores throw out perfectly good food (and sometimes padlock their dumpsters) rather than donate it to shelters, it's because this is how society works. They have to be clear that even food being thrown away is not intended to be free for the taking because if a pattern becomes established of people eating safe food out of a grocery store dumpster and one day that food is not safe, the grocery store can be held liable for injuries. Even if the grocery store never wanted anyone to use that food. The hard part would be proving the store intentionally poisoned it... But if that proof were made, the law is clear on who is responsible for the harm caused, and it's not the people eating out of the dumpster.

The underlying philosophical principle that underpins all of this legal precedent is "Don't intentionally cause harm." Marak broke that principle. Thank God Marak was only writing npm libraries and didn't own a grocery store.

This entire story, from the initial changes through the breakages through third parties intervening to mitigate their services being used to cause the breakages through other third parties stepping in to take responsibility to continue maintaining the code that had become vital, is one big open source community success story. The community interpreted intentional harm as damage and routed around it. And that was always one of the intended benefits of the open source approach, right? That the creator of the software can't ruin your day because they feel like it? Whether that creator is an evil corporation refusing to open their proprietary code, or a rogue actor deciding to take a sledgehammer to the pipeline... Open source mitigates the harm caused by both.

Re: Faker.js is now a community controlled project

#319

Post by encryptluks2 »

Macha wrote: post #307
encryptluks2 wrote: post #305

Earlier quoted context omitted.

He didn't deliver food. People picked up whatever they could find cause they felt entitled, and then said... oh look there was a sign here all along.

If we're stressing the analogy, Marak put food out in a park with a sign "Take the food, just tell everyone you got it from Marak, quality not guaranteed". Then one day the food had laxatives because he felt not enough people put money in the tip jar. I think that would still be actionable. Most people wouldn't bother, just like I don't think anyone is seriously thinking of taking Marak to court over what is mostly b…

There was no more "food". An loop in a script isn't malicious, as a user can terminate a script and by running an unknown script they are assuming some liability as well. What you're advocating for is that if an open source developer changes their code, even to say, prompt the user to confirm executing when before they didn't prompt and that somehow breaks automation that the user has built (not the developer) then they should be liable for harm. It sets terrible precedence, and the end result is no on will want to create open source software anymore. I can only hope you are simply playing devils advocate than being serious, cause if you are serious then I hope you reap what you sow.

Re: Faker.js is now a community controlled project

#320

Post by encryptluks2 »

nightpool wrote: post #241
floatingatoll wrote: post #86

Earlier quoted context omitted.

To an automated protection system that detects “repo deletion + index.html rant” commits, deleting the codebase and updating the README would red flag instantly except for the different filename, and catch lots of garden-variety intrusions. The deletion here was more complex, and most likely a human was assigned to review user reports to GitHub Security, who accurately determined it was a defacement from someone clai…

Like I said above: if that really was how it happened, I would be totally okay with that, and it's completely understandable. But without a public statement from Github on such a visible and public controversy, we're left to speculate on their motives. Many people here disagree about why and whether Github should have or did suspend Marak. I would say that your view is the maximally charitable view to Github themselv…

People don't just believe his account should have been suspended, they feel that he should be prosecuted and charged with civil tort given the comments. I think they are ridiculous Karens who would destroy open source in a heartbeat given the opportunity.
Post reply on HN