Github is telling me that because of my role in “the software supply chain” I am no longer allowed to disable 2FA on my account
-
@KatS @engagedpractx @glyph In the US at least, contracts require an exchange; for example if an employer requires you to sign a new contract in order to keep your job, and they do not offer “appropriate compensation” for signing it, they can be sued for (and have been found to have committed) wrongful termination;
Conversely, contracts like that w/no compensation are often found null and void -
@dave What app?
-
@mattly whatever you're hosting on Github that other people are using. You know, the reason you're part of a software supply chain.
-
@dave I’m not hosting anything on GitHub anymore
-
@mattly um...yes you are?
mattly - Repositories
Not a part of the "Software Supply Chain" I'm only here because I have to be – I'm active on Codeberg, now - mattly
GitHub (github.com)
I see 42 repos under your name. Trash those and GitHub will stop bothering you about 2FA.
-
@dave How many of those aren’t archived?
-
@mattly five.
And I didn't say archive, I said delete. Get rid of them completely and you will no longer be part of the software supply chain.
-
@dave Anyway spoiler alert: this new requirement is because in like 2015 I submitted a PR for something to homebrew; someone else has since taken over that responsibility
-
@dave You keep using those words, I do not think they mean what you think they mean
And the entire thread (which apparently is resonating with enough people to attract the truly thick) hinges on this:
A “supply chain” involves the exchange of money
-
@mattly $0 is an amount of money.
You're trying to have it both ways, claiming you're somehow not part of a supply chain while simultaneously supplying the world with software.
-
@dave Do you… know how business works? https://hachyderm.io/@mattly/113205441818320143
Or are you just stooging for one of the most viciously competitive companies of our time?
-
Jenniferplusplusreplied to Dave Alvarado last edited by
-
@mattly I do in fact know how business works. I *also* know how FOSS works, and how IT security works.
You are demonstrating that you know one of those three, and are applying nonsensical wordplay rules to the other two.
Let's be honest here, throwing your toys out of the crib over 2FA is pants-on-head in the year of our lord 2024.
-
Jenniferplusplusreplied to Dave Alvarado last edited by
@dave @mattly
It's really not. You're granting a lot of unsupported claims on the part of major companies that never paid a dime for any of this. But even if those claims are valid, this is still a change to the terms of the deal, and it's entirely reasonable to object to those terms and reject the deal. -
This post did not contain any content.