Github has made it impossible to create an account when using a VPN and a privacy browser with fully spoofed hardware identifiers. (Use Firefox or Firefox-based Privacy Browser, VPN, install Canvasblocker to test this.) I create an account with Google or Apple (both requiring hardware identifiers and numbers and birthdates) or I can use an email. When I use an email, it comes back with this horrible test, and even if I do it completely correctly, it tells me after I didn’t do the test right, gaslighting me with a picture of what I chose (which I didn’t choose) and showing me the correct picture (which I did choose and it claims I didn’t select).

It’s fucking bullshit and it’s more corporate control of open source software. For people who have their discussion or issue tracker, I can’t even participate without hardware identifiers likely linked to me some other way and phone numbers. It’s fucking bullshit. If anyone from Microsoft is reading this, FUCK YOU!!!

I am so tired of this bullshit. I just want to post an issue about a piece of software. You don’t need my fingerprint, hardware or personal, or biometric shit. This is a slippery slope. Fuck them.

I really hope more developers just get the fuck off Github. Honestly, if you are developing privacy-oriented software and using github, there’s a mistmatch and it’s bullshit, and I know it’s time consuming and annoying to move, but please do. This is fucking bullshit and it’s not like it’s going to become LESS annoying over time. FUCK THIS.

  • mrgoosmoos@lemmy.ca
    link
    fedilink
    English
    arrow-up
    4
    ·
    52 minutes ago

    a coworker invited me to his company GitHub team or something recently, and I tried to join several times. each time, I got stuck with a 10 question test to “verify I was human”. it was not quick. eventually, I had time to actually complete it without timing out.

    after completing it correctly twice without success, I gave up

  • veroxii@aussie.zone
    link
    fedilink
    arrow-up
    7
    arrow-down
    2
    ·
    1 hour ago

    Git is a DECENTRALIZED version control system. It doesn’t even need a server. So for someone so privacy focused to be using VPN software etc this is kind of a weird rant to go on.

    You can literally store or self host a git repo anywhere in any form.

      • FauxLiving@lemmy.world
        link
        fedilink
        arrow-up
        1
        arrow-down
        1
        ·
        23 minutes ago

        Git is a version control system, not an issue tracker.

        If you want issue tracking then you can use a system like forgejo or if you don’t want to self-host and are okay with risking creating a new centralized service which will eventually betray everything they stood for, you can use Codeberg.org (which is just a forgejo instance).

  • ramble81@lemmy.zip
    link
    fedilink
    arrow-up
    2
    ·
    44 minutes ago

    I’m curious when this happened. I literally created a new account for GitHub this week, only using an email address, and on Firefox. No wonky tests or anything needed.

  • JTskulk@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    ·
    2 hours ago

    I can’t figure out if Free software projects don’t know or don’t care that GitHub is run by Microslop.

  • davel@lemmy.ml
    link
    fedilink
    English
    arrow-up
    30
    arrow-down
    1
    ·
    5 hours ago

    Tell me how you really feel 😅

    They also own Visual Studio Code, control VSCode, and effectively control the VSCodium soft fork.

    • Silver Needle@lemmy.ca
      link
      fedilink
      English
      arrow-up
      9
      ·
      2 hours ago

      This is why you use Emacs, Kate, Neovim and so on. Never understood how anyone could use a software as confusing as VSCode.

      • FauxLiving@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        18 minutes ago

        It feels like people are just punching themselves in the face.

        Yes, Microsoft has taken over a lot of projects which made coding easy. So either you submit to Microsoft’s control or you spend the time to learn to use the alternatives.

        Emacs is basically older than computers, stable and has a huge amount of support and plug-ins. Nvim is newer, but vi/vim have existed since before electrons learned to jump bandgaps and has a similarly deep level of community expertise/support.

        If you’re just starting off, your school is likely deep in Micrsoft’s sphere of influence so you probably learned VS Code/Visual Studio. Moving to Emacs or Nvim is much harder than it would be if you had learned them in the first place, but believe me (a random stranger on the Internet wouldn’t lie to you!) it is worth the time to learn.

    • bitwolf@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      55 minutes ago

      I keep Zed and, ideally Lapce, on my system and use them where possible. VsCode is my backup.

    • ReallyCoolDude@lemmy.ml
      link
      fedilink
      arrow-up
      2
      ·
      2 hours ago

      You dont need hardware verifications with vscode, nor an account, it works with a vpn, u can disable copilot.

      • davel@lemmy.ml
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 hours ago

        Those aren’t the types of control I alluded to, as you can see upthread.

    • NoDignity@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      2 hours ago

      This is why I use Zed as an alternative with the added upside that Zed runs about 500x better than VSCode

    • GnuLinuxDude@lemmy.ml
      link
      fedilink
      arrow-up
      4
      ·
      4 hours ago

      What do you mean about VSCodium? Obviously it’s just a differently compiled version of Microsoft’s text editor, but what does Microsoft have to do with it, otherwise?

      • ☂️-@lemmy.ml
        link
        fedilink
        arrow-up
        9
        ·
        edit-2
        3 hours ago

        it’s effectively the same as chrome vs chromium. google/microsoft invests the resources to develop it, and someone simply comes and forks it without the closed source parts or telemetry.

        which is fine, but means they still get to dictate how the software works. the best real world example i have is chrome and adblockers, or google-made web “standards”.

        • davel@lemmy.ml
          link
          fedilink
          English
          arrow-up
          6
          ·
          edit-2
          2 hours ago

          Yeah. Your example: How many forks of Chome/Chromium have rejected Google’s Manifest v3 changes? Zero, because they’re all soft forks and don’t have the resources to hard fork.

      • davel@lemmy.ml
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        1
        ·
        3 hours ago

        “Otherwise” is doing Herculean lifting here when the code is nearly 100% Microsoft. The way they control it is by changing VSCode’s code, which is then dutifully incorporated into VSCodium, with the exception of telemetry code.

  • MonkderVierte@lemmy.zip
    link
    fedilink
    arrow-up
    4
    ·
    edit-2
    3 hours ago

    Btw, CanvasBlocker actually doesn’t do much more than default Firefox nowadays but breaks more things.

  • obelisk_complex@piefed.ca
    link
    fedilink
    English
    arrow-up
    9
    ·
    4 hours ago

    Agree completely, these shenanigans are a big reason I’m on a selfhosting rampage at the minute. Speaking of, does anyone have favourite self-hosted alternatives?

  • ricecake@sh.itjust.works
    link
    fedilink
    arrow-up
    6
    arrow-down
    1
    ·
    4 hours ago

    Tangential to the main point you’re going for: when you say fingerprint or biometrics I think you’re referring to passkeys.
    Passkeys don’t share any of your fingerprint or other biometric identifiers with anyone.

    https://www.eff.org/deeplinks/2023/10/passkeys-and-privacy

    One of the major design criteria of their creation was to be an increase in security without sacrificing privacy. It’s made them more finicky to get working but there’s a very good reason they’re very popular with security professionals.

    • partofthevoice@lemmy.zip
      link
      fedilink
      arrow-up
      1
      ·
      45 minutes ago

      They are not referring to passkeys. They’re referring to deterministic algorithms for uniquely labeling a particular device or person, despite any privacy enhancing features that device or person employed. It can be as simple as sampling various hardware specs, hashing the result, and using that as an ID for the person. So, if you switch browsers, they know it’s still you. More complex techniques exist, obviously.

      • ricecake@sh.itjust.works
        link
        fedilink
        arrow-up
        1
        ·
        26 minutes ago

        I know how device fingerprinting works, thank you though.

        You don’t need my fingerprint, hardware or personal, or biometric shit.

        To me that sounds like hardware identifiers, but also quite specifically the things passkeys use. Hence I mentioned it as aside from their main point, which was “don’t track me”, because the biometrics GitHub or any website is going to ask you to use can’t be used for that.

  • typhoon@lemmy.world
    link
    fedilink
    arrow-up
    1
    arrow-down
    1
    ·
    1 hour ago

    I wonder how this potential diaspora of repos from Github may affect some package distributions that are merely pointing the application to be compiled like is the case in some AUR application. Will it generate quite a lot of overhead for AUR maintainers?