Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Leaving GitHub for Forgejo

jorijn.com

Post reply on HN
Print view View original

331–340 of 380 posts

Re: Leaving GitHub for Forgejo

#331

Post by m4rtink »

lelanthran wrote: post #172
thisislife2 wrote: post #165

Earlier quoted context omitted.

I completely share your sentiment about feeling irked about open source code being used to train commercial AI models. However, I think the battle is already lost - the nature of copyright and open source code philosophy (currently) means that there isn't any real way of preventing your code being used to train AI. Look at the legal precedents being set in courts where many of the BigTechs have actually pirated copyr…

> However, I think the battle is already lost - the nature of copyright and open source code philosophy (currently) means that there isn't any real way of preventing your code being used to train AI. Laws should make it a double-edged sword, make distillation explicitly legal. Not much else they can do.

Make all LLM output licensed as AGPLv3 - the license is viral, right ? ;-)

Unless you can actually prove what your model has ingested & if you have the license for it in court.

Re: Leaving GitHub for Forgejo

#332

Post by yesnomaybe »

Have just switched my org to self-hosted forgejo. Handful of devs and users. Been great so far. Storage need be tamed, it's using minio S3 for the big items like artifacts.

Auth using OpenID Connect working well, would recommend good security hardening.

Runners are in EC2 auto scaling groups. Don't have to be though, there is also a K8s based solution out there I believe.

Re: Leaving GitHub for Forgejo

#333

Post by NeutralCrane »

PaulKeeble wrote: post #129
bayindirh wrote: post #11

Earlier quoted context omitted.

While I'm not forgetting the spirit of what Git is, I'm also remembering how GitHub used "all open repositories" to train their first Copilot without telling anyone. So, no thanks. I'll not be committing any personal code there anymore. And no, I don't care for the social aspects either. Discoverability, stars, and AI bot powered issue bombardment. I'm fine like this. Also, remember, "Open Source is not about You".

It did so in direct violation of the licenses of the code held there as well and then sold code snippets they had no rights to and still do.

IP law is a farce, and the open source licenses are built upon that farce. If a single good thing comes out of LLMs, it will be forcing society to recognize “intellectual property” for the dystopic stupidity that it is. I doubt it though.

Re: Leaving GitHub for Forgejo

#334

Post by dgavrilov »

nottorp wrote: post #62

What if you don't want to self host? Who offers low feature git hosting for a small price? Something like the old $7 account before github was bought by MS? All I want is hosting and a read only web interface, plus access control in case I have collaborators. All the offerings are enterprise priced because they offer "minutes of CI", "AI assistants" and other icing on the cake.

CodeFloe https://codefloe.com/

Re: Leaving GitHub for Forgejo

#335

Post by embedding-shape »

Myzel394 wrote: post #203
embedding-shape wrote: post #44

Earlier quoted context omitted.

> I’m thinking about making public instance and use it with https, but minimize the attack surface, any recommendations especially about gitea/forgejo? I've done this too in the past, I'm still running the internal/lan Forgejo instance, but not any public instance at the moment. But in the past, I've setup a public read-only instance, which mirrors my internal one, then one reverse-proxy connection from the internal…

Did you use some sort of intrusion prevention system? I'm using cloudflare's anti ddos service + crowdsec, but I'm still getting bombarded with hundreds of thousands of requests per month

Besides rate-limiting with Caddy + fail2ban, not really. It's the public internet, anything gets bombarded almost as soon as it's public, but all requests are read-only requests so doesn't really impact anything beyond filling the access logs. Trivial to filter away when you want to do analytics too, so isn't really a problem.

Re: Leaving GitHub for Forgejo

#336

Post by KolmogorovComp »

rirze wrote: post #167
satvikpendem wrote: post #83

I've also heard of Tangled [0] which is decentralized and built on the AT Protocol like Bluesky but also has some genuinely useful features that GitHub has been dragging its heels over in implementing, like PR stacking, such that entire companies have sprung up to add that feature in GitHub. Has anyone tried this? [0] https://tangled.org/

It's too decentralized for my taste IMO. I like using radicle.xyz instead.

can you expand on what makes you think being too decentralised is a negative?

Re: Leaving GitHub for Forgejo

#337

Post by techknowlogick »

lloydatkinson wrote: post #330
techknowlogick wrote: post #269

Earlier quoted context omitted.

I'm one of the project leads of Gitea (and am paid for some of my work on Gitea), and here are some more details around the specific incident you are talking about: We were alerted to an issue, and investigated provided a patch, and then waited until the end of the embargo to release the next version with the fix. It turns out they had sent a follow up after our response to them that, due to their usage of an email r…

Thanks for the write up. This makes me consider Gitea again. That sounds like a frustrating and absurd situation.

[dead]

Re: Leaving GitHub for Forgejo

#338

Post by davidgerard »

lloydatkinson wrote: post #90
import wrote: post #14

I’ve moved to self hosted gitea a year ago running in my homelab and not publicly accessible. No https, registrations disabled and repos are not public. I’m thinking about making public instance and use it with https, but minimize the attack surface, any recommendations especially about gitea/forgejo?

When I adopted Foregjo I did so because I didn't like the sound of some political arguments across threads about some alleged security issues Foregjo raised with Gitea who allegedly ignored them. What keeps you using Gitea? I'm wondering if I should try it over Foregejo now.

Note that Gitea has embraced AI code, and Forgejo refuses it - if that's a criterion for you.

Re: Leaving GitHub for Forgejo

#340

Post by oliculipolicula »

jdw64 wrote: post #304
oliculipolicula wrote: post #296

Earlier quoted context omitted.

Audrey-Balaji-Glen-Vitalik blog about how to liberate society from the hamster wheel of centralisation-decentralisation. (Moksha from samsara? ) https://archive.ph/2024.08.23-032320/https://vitalik.eth.lim... It doesn't necessarily mean we should immediately suspect them of raising a flag for its own sake. https://archive.ph/2024.08.23-032320/https://vitalik.eth.lim... Epstein files remind me of the first line from《삼…

I always feel this, but your writing is quite challenging—not because of the readability, but because the content itself is deeply complex for me to grasp. I spent about two hours reading your writings. Your arguments, such as those regarding the Taiwanese digital democracy movement and how to break the endless cycle of centralization and decentralization, are quite profound. If I were to summarize what you are tryin…

Hey. It's hard not to be a bit envious of how many points you, jdw, can rack up with one or two comments while I languish at negative :)

No need to learn nuance, you seem to be doing better than most of the natives here just by being yourself (with the help of modern tools)

I just wanted to get more people to read the vitalik.eth articles along with me. Hope you got something out of 2hours! I had been nibbling at them and steeping in their diagrams for weeks, your centralisation comments provoked me (in a good way)

Vitaliy Buterin and Balaji Srinivasan are both based in SEAsia, Audrey Tang is in Taiwan, Glen Weyl from California is the only Westerner--- but UCBerkeley is like 80% East Asians? Surely they also know about the lore.

I don't know if "staying vigilant" is the mood I was going for. Maybe "being aware of emerging centralising entities and be prepared to engage fruitfully with them"?

These days, "emerging centralising entities" might even be old programming languages like APL that have become popular again..

In the context of the links above, such entities need to provide an "exit option" in order to gain wider traction. For example, APL is clearly an escape from C-like syntax, but there might be new directions that that such "array languages" can take from Python or even natural language:

https://news.ycombinator.com/item?id=16247365

Post reply on HN