FOSS accused of “abuse” by Telefonica because 1998 signed code with corp email
1–10 of 21 posts
Re: FOSS accused of “abuse” by Telefonica because 1998 signed code with corp email
#2[deleted]
Re: FOSS accused of “abuse” by Telefonica because 1998 signed code with corp email
#3What does GDPR have to say here? Do maintainers have to rewrite git history if someone requests deleting their email from it?
Re: FOSS accused of “abuse” by Telefonica because 1998 signed code with corp email
#4What does GDPR have to say here? Do maintainers have to rewrite git history if someone requests deleting their email from it?
But it's not the person. It's the corporation the person worked at the time. A company can't make a GDPR request on behalf of an ex-employee.
Re: FOSS accused of “abuse” by Telefonica because 1998 signed code with corp email
#5Streisand effect
Re: FOSS accused of “abuse” by Telefonica because 1998 signed code with corp email
#6What does GDPR have to say here? Do maintainers have to rewrite git history if someone requests deleting their email from it?
It's an interesting question. There are politically loaded repos and potentially someone may regret their contributions over a 20 year period. I don't see a valid exemption in the GDPR. The closest seem to be the personal activity exemption (subject could go after GitHub though) and public interest archiving, but I don't think the latter stands in the case of a public code repository.
Re: FOSS accused of “abuse” by Telefonica because 1998 signed code with corp email
#7This is exactly the level of competence I'd expect from "Telefónica Cybersecurity & Cloud Tech". The following comment is a good rebuttal to these idiots: https://github.com/steve-m/speedport_neo_source/issues/1#iss...
Re: FOSS accused of “abuse” by Telefonica because 1998 signed code with corp email
#8What does GDPR have to say here? Do maintainers have to rewrite git history if someone requests deleting their email from it?
But it's not the person. It's the corporation the person worked at the time. A company can't make a GDPR request on behalf of an ex-employee.
It looks to me like it's not even the corporation they worked for but an external corporation claiming to represent the corporation that the user worked for 25 years ago
Re: FOSS accused of “abuse” by Telefonica because 1998 signed code with corp email
#9mr paco garcia about to get arrested
Re: FOSS accused of “abuse” by Telefonica because 1998 signed code with corp email
#10What does GDPR have to say here? Do maintainers have to rewrite git history if someone requests deleting their email from it?
This is a common scenario for trans people who want to keep their previous identities secret for safety reasons. Git does not handle committer name changes by design, but I certainly wish there was some way of handling this scenario somehow. It’s not clear to me how one would maintain project provenance while allowing this use case.
When I changed my name, I submitted a PR to change it in the CONTRIBUTORS file of a project I had fixed a bug for. The approver privately reached out to me and offered to coordinate a global history rewrite among the core devs on my behalf. I declined because I don’t have that sort of safety need, but I’m incredibly grateful that there are maintainers out there who would be willing to go out of their way for something like that to help a non-core dev out.