Post

Yeah the moment I saw that info in the reddit thread I was like "okay I get why people were concerned initially about the git history stuff, but this is several steps too far the fuck is wrong with you". Was sad but not surprised to see the follow-up.

I actually don't think the person who did it even intended it badly, they just did not think at all about the implications. But I could read between the lines as soon as bits of info started surfacing just why the author probably wanted privacy and then to see people just continue...blech.

0 reposts17 likes

yeah OOP has a chosen name too so definitely no bad intentions, just fully didnt know at the time that the display name that was still actively being used to publish the crate was supposed to be changed until OP said so, else i'm sure it would've played out a bit more delicately

yeah. I saw an apology from one of the people in a subsequent thread. was glad to see it. but god this all could have been avoided by reaching out privately first before enlisting reddit for OSINT.

I don't think they did not think it through. Hosting was moved and history on GH deleted to say FU to AI scraping. Project was considered "done" with no future releases. Rename happened for undisclosed reasons (but there were reasons) but was considered unimportant given no new releases ever.

Published crate stays as it is. The new repo head can be verified against cargo if one wants to fork. The version you or whoever uses can be pinned (and should if supply chain attack is part of the risk assessment).

wtf happened to the subreddit? i haven't been a regular reader for a few years at this point but the thread Steve linked above is the sort of discourse i'd expect to see in HN comments, not what i would have assumed of /r/rust...

It's not normally that bad (though there is an AI slop crate problem and the quality's gone down a fair bit overall), I think the juicy drama pulled in a lot more shitty people than normal.

yeah, i saw that. when someone said the creator had basically just gone through and re-signed commits with a different name, nothing had actually been altered...

yeah seriously. like okay it got re-signed, it still had the same commit hash, etc. would be hard to change the code in the repo without changing that lol