Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Vouch

github.com

Post reply on HN
Print view View original

201–210 of 507 posts

Re: Vouch

#201

Post by jen20 »

BiteCode_dev wrote: post #163
jen20 wrote: post #142

Earlier quoted context omitted.

Can you cite the law that says you may not do this? There are obvious cases in Europe (well, were if you mean the EU) where there need not be criminal behaviour to maintain a list of people that no landlord in a town will allow into their pubs, for example.

Under the EU’s GDPR, any processing of personal data (name, contact, identifiers, etc.) generally requires a legal basis (e.g., consent, legitimate interest, contractual necessity), clear purpose, minimal data, and appropriate protection. Doing so without a lawful basis is unlawful. It is not a cookie banner law. The american seems to keep forgetting that it's about personal data, consent, and the ability to take it…

> The american seems to keep forgetting that it's about personal data, consent, and the ability to take it down.

I am European, nice try though.

It is very unclear that this example falls foul of GDPR. On this basis, Git _itself_ fails at that, and no reasonable court will find it to be the case.

Re: Vouch

#202

Post by cyanydeez »

a-dub wrote: post #172

this highlights the saddest thing about this whole generative ai thing. beforehand, there was opportunity to learn, deliver and prove oneself outside of classical social organization. now that's all going to go away and everyone is going to fall back on credentials and social standing. what an incredible shame for social mobility and those who for one reason or another don't fit in with traditional structures.

argueably, the years 2015-2020, we should have gone back to social standing.

Re: Vouch

#203

Post by siva7 »

a-dub wrote: post #172

this highlights the saddest thing about this whole generative ai thing. beforehand, there was opportunity to learn, deliver and prove oneself outside of classical social organization. now that's all going to go away and everyone is going to fall back on credentials and social standing. what an incredible shame for social mobility and those who for one reason or another don't fit in with traditional structures.

It also marks the end of the open source movement as the value of source code has lost any meaning with vibe coding and ai.

Re: Vouch

#204

Post by mitchellh »

femto113 wrote: post #144

Users already proven to be trustworthy in one project can automatically be assumed trustworthy in another project, and so on. I get the spirit of this project is to increase safety, but if the above social contract actually becomes prevalent this seems like a net loss. It establishes an exploitable path for supply-chain attacks: attacker "proves" themselves trustworthy on any project by behaving in an entirely helpfu…

I think this fear is overblown. What Vouch protects against is ultimately up to the downstream but generally its simply gated access to participate at all. It doesn't give you the right to push code or anything; normal review processes exist after. It's just gating the privilege to even request a code review.

Its just a layer to minimize noise.

Re: Vouch

#205

Post by senko »

a-dub wrote: post #172

this highlights the saddest thing about this whole generative ai thing. beforehand, there was opportunity to learn, deliver and prove oneself outside of classical social organization. now that's all going to go away and everyone is going to fall back on credentials and social standing. what an incredible shame for social mobility and those who for one reason or another don't fit in with traditional structures.

The origin of the problems with low-quality drive-by requests is github's social nature[0]. AI doesn't help, but it's not the cause.

I've seen my share of zero-effort drive-by "contributions" so people can pad their GH profile, long before AI, on tiny obscure projects I have published there: larger and more prominent projects have always been spammed.

If anything, the AI-enabled flood will force the reckoning that was long time coming.

[0] https://news.ycombinator.com/item?id=46731646

Re: Vouch

#206

Post by tolerance »

a-dub wrote: post #189
boltzmann-brain wrote: post #179

Earlier quoted context omitted.

Vouch is a good quick fix, but it has some properties that can lead to collapsed states, discussed in the article linked here: https://news.ycombinator.com/item?id=46938811

it's also going to kill the open web. nobody is going to want to share their ideas or code publicly anymore. with the natural barriers gone, the incentives to share will go to zero. everything will happen behind closed doors.

You could argue that this could increase output to the open web: outsiders still need a place to clout chase.

Re: Vouch

#207

Post by yencabulator »

mitchellh wrote: post #200
yencabulator wrote: post #191

Earlier quoted context omitted.

.. all revolving around a proprietary Microsoft service. Support Microsoft or be socially shunned?

Vouch is forge-agnostic. See the 2nd paragraph in the README: > The implementation is generic and can be used by any project on any code forge, but we provide GitHub integration out of the box via GitHub actions and the CLI. And then see the trust format which allows for a platform tag. There isn't even a default-GitHub approach, just the GitHub actions default to GitHub via `--default-platform` flag (which makes sen…

Define "platform".

So I can choose from github, gitlab or maybe codeberg? What about self-hosters, with project-specific forges? What about the fact that I have an account on multiple forges, that are all me?

This seems to be overly biased toward centralized services, which means it's just serving to further re-enforce Microsoft's dominance.

Re: Vouch

#208

Post by boltzmann-brain »

tolerance wrote: post #206
a-dub wrote: post #189

Earlier quoted context omitted.

it's also going to kill the open web. nobody is going to want to share their ideas or code publicly anymore. with the natural barriers gone, the incentives to share will go to zero. everything will happen behind closed doors.

You could argue that this could increase output to the open web: outsiders still need a place to clout chase.

GitHub has never been a good method of clout chasing. in decades of being in this industry, I've seen some stuff on your GH.

Re: Vouch

#209

Post by patcon »

a-dub wrote: post #172

this highlights the saddest thing about this whole generative ai thing. beforehand, there was opportunity to learn, deliver and prove oneself outside of classical social organization. now that's all going to go away and everyone is going to fall back on credentials and social standing. what an incredible shame for social mobility and those who for one reason or another don't fit in with traditional structures.

I feel this is a bit too pessimistic. For example, people can make tutorials that auto-certify in vouch. Or others can write agent skills that share etiquette, which agents must demonstrate usage of before PRs can be created.

Yes, there's room for deception, but this is mostly about superhuman skills and newcomer ignorance and a new eternal September that we'll surely figure out

Re: Vouch

#210

Post by dedzycide »

jimmaswell wrote: post #97
rcakebread wrote: post #95

Who trusts people who still use X?

I still prefer it to Wayland for various reasons, and I don't think Wayland would work properly on my mid 2010 Macbook anyway.

i believe he is talking about Twitter(X) and not x11. so a political stance from the x.com in the description. i love running x11 too, wayland is still not there yet sadly, still has a few quirks.

if not mistaken x11 is what mitchell is running rightn ow https://github.com/mitchellh/nixos-config/blob/0c42252d8951a...

Post reply on HN