Since yesterday a lot of users in Europe found their workflows failing due to Github seemingly randomly throwing HTTP/401 on git clone/git pull when interacting with public repos without authentication.

It was now confirmed by staff member that this indeed is intentional and no further steps are planned at this point.

top 50 comments

sorted by: hot top controversial new old
[–] [S] 123 points 4 days ago (2 children)
  • [–] 23 points 4 days ago (12 children)

    The word is “scrapers,” as in to scrape.

  • source
  • parent
  • hideshow 14 child comments
  • load more comments (10 replies)
  • [–] 75 points 4 days ago

    did microsoft just lock up a good chunk of open source behind a (stochastic (for now)) login wall?

    this feels like it should violate the gpl, but i bet it doesn't. truly devious.

  • source
  • [–] 24 points 3 days ago* (2 children)

    Holy crap this is huge!

    Open source is no longer open source on github.

  • source
  • hideshow 4 child comments
  • [–] 16 points 3 days ago

    Embrace. Extend. Extinguish.

  • source
  • [–] 60 points 4 days ago (1 child)

    Public GitHub repositories remain public and can still be accessed without a GitHub account, including repositories owned by paying customers. However, a subset of unauthenticated clone or fetch requests may now be asked to authenticate as part of GitHub’s protections against abusive traffic. If you receive a 401, update your application or script to use GitHub credentials.

    Uh okay.

  • source
  • hideshow 2 child comments
  • [–] 37 points 4 days ago (16 children)

    I wonder why people still keep up with this bullshit and not switch to some better public Git hosting provider.

  • source
  • parent
  • hideshow 17 child comments
  • [–] 5 points 3 days ago* (last edited 3 days ago)

    Can you help me find a solution that:

    1. I don’t have to self host
    2. Provides SSO
    3. Provides local and remote build agents and actions
    4. Allows me to store private proprietary code
    5. Supports static IPs for runners

    Number 4 rules out Codeberg. The only other one that really supports that level is Azure DevOps, and well….

  • source
  • parent
  • load more comments (15 replies)
  • [–] 19 points 3 days ago (5 children)

    This might be a problem for many projects. Rust, comes to mind, that pulls everything from Github and is 100% dependent on it. Same as Go. They pull everything from Github.

    It might make sense for them to use something like radicle, a distributed git. Many people can easily pick what they want to distribute. Scripts can be written that make the local node only host the projects you depend on. That would naturally make popular projects more available.

  • source
  • hideshow 8 child comments
  • load more comments (2 replies)
    [–] 27 points 4 days ago

    Our aim is to make public repositories accessible without authentication as much as possible. However,...

    It's new reddit then. I was still using Github as a shitty backup for my projects, but an alternative may be required faster than expected.

  • source
  • [–] 19 points 3 days ago* (1 child)

    I deleted my repos on github and moved to a mix of codeberg and selfhosted forgejo.

    But I do occasionally fork/clone/reupload random projects from github to github so they have to spend money on storage and the scrapers.

  • source
  • hideshow 2 child comments
  • [–] 5 points 3 days ago (1 child)

    First time ever seeing color in a post title

  • source
  • hideshow 2 child comments
  • [–] 16 points 4 days ago (1 child)

    Time to leave github! Boycott is the only language companies understand!

  • source
  • hideshow 1 child comment
  • load more comments (1 reply)
    [–] 7 points 3 days ago (3 children)

    AI bot problem is real and there is no good solution to it. Look, I very much dislike GitHub for various reasons BUT currently there is no good way to throttle AI bots that literally trash web. They are like that geeky classmate who can never hold his liquors: it's nice having them around for some answers, but they ramble a lot and shit/puke in random places of the house making it unlivable.

  • source
  • hideshow 6 child comments
  • [–] 7 points 3 days ago (1 child)

    BUT currently there is no good way to throttle AI bots that literally trash web.

    Sure is. There are plenty of protocols resilient to DDOS.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 3 days ago

    DDOS is most effective on expensive endpoints. A git clone isn't exactly cheap. Fetching is especially expensive if you vary the revisions you fetch.

    Does GitHub have an alternative here? A Git-compatible protocol with anonymous access that is DDoS-resilient?

  • source
  • parent
  • load more comments
    view more: next ›