minfapper

Eh, it’s less about defeatism and more that I’m watching a fight between two assholes so I’m finding it hard to empathize with either side.

Like… Publishers regularly screwed over consumers, content creators, and tried to break the web multiple times. They can bleed for all I care

By default pull requests my new contributors require approval from someone with write-access to the repo before running actions.

These repos have specifically decided to change a setting to make them not require approval for anyone. The UI to change that setting explicitly warns you about exactly this attack, so this “article” feels like a non-item trying to farm engagement.

The core of the problem trickles down to weak CI/CD configurations that grant pull requests (PRs) more permissions than they should have.

How exactly do their competitors like codeberg do better in preventing that?

Does it have to be an SBC? I’ve had great success with a second hand Lenovo Thinkpad

That is the longest amount of time I’ve ever spent on an advertisement.

Bard, btw