[conspire] (forw) [DNG] [OT] YouTube archivism targeted

[Nick Moffitt]

On 26Oct2020 06:50pm (-0700), Rick Moen wrote:
> In response to RIAA's infringement notice, Microsoft/GitHub immediately 
> disabled all access to the youtube-dl development repo.  (This is one of
> many reasons why nobody should have _ever_ put primary reliance on
> GitHub for essential data.)

In response to the takedown, various people have begun taking advantage of github's WONTFIX stance on a rather significant bug:

	https://gist.github.com/lrvick/02088ee5466ca51116bdaf1e709ddd7c

This works through four basic facts about github:

1. You can push commits to any repository by forking it.
2. You can impersonate any user by simply setting your e-mail address in `.git/config` in your clone and making a commit.
3. You can make the commits "stick" to the upstream repository's interface by interacting with them there.
4. Posting comments on the commits raises their visibility to other users.

Here's an example:

	https://github.com/npm/cli/commit/5a3b345d6d5d175ea9ec967364b948c662a2ef16

Of course a lot of this stems directly from the fact that nobody bothers to gpg sign their commits.