Undo

Tempting!

@gparyani fwiw, I don't think I even have discord installed

I'll let ya'll know if I see anything

@tripleee I don't have anything new in my inbox from them, this is the last thing I got:

Had it confused with a different project

@tripleee Yep, I was thinking later about how it probably was

@Makyen Ah, just the ones with that specific Onion link

@Makyen You’re right, of course, but this is on my list of stuff I don’t want to mess with at all. I only care because my domain is tied to all this stuff, and I’m not interested in dealing with some overzealous law enforcement outfit doing something stupid while they’re following the threads after nuking real CSAM

which is good enough for me

@CodyGray guessing from context it's an "index" that contains links to many .onion sites, some of them are probably CSAM

@Cow to be direct - if it contains CSAM of any kind, I'll drop all those references from MS.

we've seen that one a bunch of times: metasmoke.erwaysoftware.com/domains/73102

I don’t think I’ve ever actually used tor

Yeah, it takes real effort to follow an onion link, so I’m guessing it was just from context that we’re assuming it was CSAM

I’m guessing no one actually followed the onion link and saw actual CSAM?

It wouldn’t surprise me much at all if GH has a list of onion hashes that are blacklisted. Those are long and unique enough that they could do it without any real FP risk

@Cow That would make some sense as a trigger

I’d be fine with writing off tor.se

it’s at some level of admin

@Spevacus I’m not involved much anymore, but my policy has always been that CP, and to a lesser extent abuse generally, doesn’t need to be in metasmoke. We have a button for nuking stuff specifically for that

law enforcement

I could see LEs having a workflow that looks like “kill Tor site, kill anything linking to it”

They’re .onion links?

CP is so radioactive that it might be counterproductive to try to prevent it

@tripleee wasn’t aware of this, might be prudent for us to drop those completely

What's crazy if this is an automated thing is that this is a 400+ star repo. Not a crazy number, but they should be able to derive a reputation score from who's starring repos and apply some sanity based on that

The places that have been backed off tend to have "telling the public to clone the whole thing, as part of a devops process" in common

Reading/writing from the tip are trivial O(1) ops for GH

@CodyGray Than the average, but not in a way that causes load

we aren't telling the world to clone stuff all the time

@CodyGray nah, the way we interact shouldn't even be a blip

@tripleee Microsoft paid me for a while and I think even that was a mistake

@CodyGray Sure would

@CodyGray So you don't have proof they still exist

Though the lower tiers are basically paid Gmail

M365 is, yeah

Striking everything with "genuine-nike-shoes-delhi.com" is the kind of thing that appears safe at first glance to a new PM

@Slate Yeah, that's my guess

@CodyGray idk, have you seen humans lately?

how funny would it be if it's a copyright strike from SE, for some 'good' examples we have in tests for CI

@CodyGray ^ Yeah, they didn't send anything

@ThomasWard Metric for impact on society: How many people you could piss off but choose not to

@SmokeDetector Didn't realize we were up to 10-char commit short-hashes, looks kinda cool

@ThomasWard you just haven't angered enough Brazilian judges

can't touch it yet

Fighting with people to do something good for them is draining

@ThomasWard Ya'll can do what you want, but at some point should consider whether the world is saying it just doesn't want the service we provide