

Yes you are right, damned! Why git isn’t signing the diff (patch)? This is so wrong on so many level, signing already hash the content, we can sign multiple GiB without any issue.


Yes you are right, damned! Why git isn’t signing the diff (patch)? This is so wrong on so many level, signing already hash the content, we can sign multiple GiB without any issue.


Welcome welcome : https://lemmy.ml/c/antiai
Also https://lemmy.blahaj.zone/c/AntiAI
EDIT: fix 2nd link


Indeed it is still relevant. I am wondering what does it sign for tags.
EDIT: Are you sure about that? signing the hash felt logical but digging about it this seems a false assumption. git is signing the whole commit object.


Security is achieved through other means.
Let’s explicit this: you can, and should, sign your commits if you want security (no commit tampering). You need to:
gpg --full-generate-keygit config --global user.signingkey [public key ID]git config --global commit.gpgsign trueNote that I used --global here but you can do without to sign on a per-project basis.
Also gpg UX is terrible, to find the [public key ID] use the command gpg --list-keys, it should looks like:
pub ed25519 2026-01-01 [SC] <- type algorithm date and capability (this key is only to Sign and Certify)
662E3CDD6FE329002D0CA5BB40339DD82B12EF16 <- Public key ID
uid [ultimate] my full name (Master Key) <my_email@domain.com> <- owner information (should be your name and email address)
sub rsa4096 2026-01-01 [E] <- sub key used to encrypt
sub ed25519 2026-01-01 [S] [expires: 2027-01-01] <- subkey used to sign
Last, if you want to save/backup you keys the default location of gpg files is ~/gnupg or you can export keys with gpg --export [key ID] > path/to/file.key for the public part and gpg --export-secret-keys [private key ID] for the private part. Both export can have a -a or --armor argument to output as base64 text instead of raw binary. [private key ID] can be found with gpg --list-secret-keys.
EDIT: after writing this I checked https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work and TIL you can sign tags too.
EDIT 2: you can also use your ssh key to sign -> git config --global gpg.format ssh (I am less inclined to do this as you won’t have subkeys and expiration date but this would be simplier indeed)


Thanks for sharing.
Why didn’t I know lobsters before? This look 1000 times better than HN… oh you can’t join. Makes sense it isn’t that known.


It’s sad to see this community only listening to people because they’re rich: there are a lot of better engineers who knows more than this guy but they’re not “co-creator of GitHub”. I read this title as boot licking silicon valley.
That being said you don’t hash git commits for security reason : YOU SIGN YOUR COMMITS FOR SECURITY. Sorry for the caps but let’s make this visible.


Is this even legal to not identify yourself while selling a product?
I salute the initiative but to be honest I’d prefer a lemmy instance by a long mile (actually always looking for lemmy instances deferated from all the noise).
I can’t stand the discourse UX and I am pretty sure that, like slack, this is a black hole where any message in the middle is lost forever (no one will read them).
AI slop, the guys pretends to be software engineer and outputting posts every day. This is extremely low quality, no wonder he advocates not avoiding AI.
Y combinator is deeply rooted in fascism, I’m trying to find the hacker-news post that shocked me about “going back to silicon-valley root: the military industry”. The “liberal-progressive” tone that can be read from commenters can soften the overall vibe but in the end the tone is definitely not great : last example for me was how the “stopomarchy” news was treated (flagged, and the comments smells very bad) : https://news.ycombinator.com/item?id=49661901
It’s been 2 years now that on top of this the vast majority of “news” are LLM related. And if you’re not into that this make the website not worth anything any more.
It is lacking the “money problem”: the high cost is adsorbed by big capitalist organizations (at the cost of the hardware price inflating) that hope to get everyone addicted/dependent on the tool to then surge the prices.
This is not open tech, this is not for everyone, this is not to make a better world. This is business.
The price already screams “green washing”, let’s see the policies:
1- Take a simple pledge to show your commitment to environmental action.
2 - Affirm your eligibility by sharing your eco actions and commitments.
Yep! confirmed green washing.


Please add the cost : this is not for everyone, not even close. Investor are paying for 99% of the cost right now with the hope of having everyone dependent on the tools to then multiply the prices by 100 once the “market penetration” feels satisfactory.
Also purely stealing people’s jobs from those same people’s work even when the work is explicit stating they refuse to be part of this farce.


What the hell is this AI slop?
The internal refactoring is going to be crazy, the amount of pm in the code base is crazy.
I just checked and for now internal everything is still pm.
I don’t like the green washing domain costing 60 euros a year (+60 euros registration!) when it cost them cents… This is 101 gatekeeping internet in general, but I guess it OK for them to spent that amount of money to help closing the internet to small people with not that deep of money.
And this is not coming from a hater, I participated to PostMarketOS (as dev), I like the project and want to see the project growing, but I can’t stand the current “slipping into fascism” trajectory of western societies. Giving corporation full control and removing everything that made the internet neutrality (you can’t own a domain unless you have quiet the money now, don’t event get me started on e-mail or IPv6). Green washing is not going to help.
Crypto Bro -> https://cointelegraph.com/opinion/web3-has-a-metadata-problem , https://bitcoinmagazine.com/technical/why-mixnets-are-needed-to-make-bitcoin-private
Also they love using LLM trained on our works (devs) : https://nym.com/blog/bug-bounty-ai-age
About the fascism I understand that few people here (proportionally) seems to not be educated on the topic (I see to many pedolandians or canadians in here maybe) : fascism is not being a bad guys wanting to control everyone, lots of monarchs were that way, this is not fascism. Fascism is the bourgeoisie (the social class owning the properties, even more so the means of productions) taking power over society, the more power they grab the deeper you’re in fascism. That’s why many western people do not understand they live in fascist societies while they can agree that money is the real power, not the decrepit old white man put in front (thus they don’t understand fascism, and I think this is on purpose, from schools to media).
So a senior research scientist at MIT (CEO) and a founder of Swiss crypto brokerage and financial services firm (COO) decided to create a company in… wait for it… Switzerland! Famous country know for it fight against the aggression of the bourgeoisie for the last century and its strong stance against today’s genocides. Definitely not known for being the Nazi’s gold vault and all sorts of awful money laundering. If you understand that fascism come from the people who owns the money what do you think about private banks? Swiss is fascists’ paradise and it always have been.
I can close my eyes on Swedish people establishing in Sweden, or anyone in his European country, even if the actual government is far-right there or not. But this is not really the case here, it’s more like the Y-combinator guys establishing in Delaware or… Cayman Islands! This is 101 people only seeking money at the expense of everyone else. Hence my point of view this is already quiet deep in fascism, even if there are smart enough not to open their mouth about Palestine and keeping themselves into crypto-broing and “privacy” (I could totally see them loving anarcho-capitalism).
Also bonus : what social media do they choose? OH NO! Linkedin and Twitter, I wouldn’t have guessed. If you want maximum cringe check the avatar -> https://www.linkedin.com/in/alexis-roussel-01993143/
Yet an other swiss based facsist company with a touch of crypto bro. No thanks.
the amount of lies is interesting from your part.
Let’s go to the awfully fascist page https://world.hey.com/dhh/as-i-remember-london-e7d38e64 , search for “Robinson” and… 2 occurrences. the first being what you quoted* (“this frustration” referring to
So I get the frustration that many Brits have with the way mass immigration has changed the culture and makeup of not just London, but their whole country.
Then the second times shows
Which brings us back to Robinson’s powerful march yesterday. The banner said “March for Freedom”, and focused as much on that now distant-to-the-Brits concept of free speech, as it did on restoring national pride.
And for good reason! The totalitarian descent into censorious darkness in Britain has been as swift as its demographic shift. […]
So… he didn’t say anything about Robinson’s politics? You surely see only what you want.
Fascism is the concept this guy is lacking in order to describe what’s happening here, and its consequence: imperialism.
Oh wait, wikipedia:
He is fascist after all, Wow.