@tychotithonus@infosec.exchange
Post #4070055
2026-07-24 18:52 UTC
Update on the FreeBSD ports cleanup after someone committed a 150M blob of the Linux Copilot CLI:
https://people.freebsd.org/~kevans/core/ports-freeze-final.txt.asc
Good as far as it goes, especiallly the striving for transparency, reproducibility, and minimizing downstream impacts.
Notably missing, however:
an explanation of how it happened in the first placeconcrete steps that will be taken to prevent it from happen again
#FreeBSD
Replies (2)
-
@trashheap@tech.lgbt 2026-07-24 18:57
@tychotithonus@infosec.exchange The first announcement mentioned: We are also implementing server-side hooks to prevent this from happening in the future.
-
@gnomon@mastodon.social 2026-07-25 02:48
@tychotithonus@infosec.exchange (quietly, privately: I think we're about ten years past the point when git needed a design goal expansion to allow policy control based on content attributes beyond just glob matching filenames and paths. Blob size is too much of a bugbear for git's data model to continue without first-class mechanisms for structuring handling decisions about it.)