> On Thursday, May 5, 2016 12:14 AM, Chris McCormick <chris@mccormick.cx> wrote:
> Hi Jonathan,
> [...]
> This may be relevant to your interests:
>
https://github.com/chr15m/gitnonymous> Cheers,
> Chris.
I thought about this a bit, and I've come to the conclusion that-- currently--
there is never a situation where I'd accept code submitted anonymously.
But even more important, there is never a situation where I'd personally
vouch for code publicly attributed to some unknown person or entity's
pseudonym. That's the only sane way forward IMO-- if you ask me who
"user@user-ThinkPad-X60.(none)", the answer is, "that's garbage I
mistakenly leaked from my laptop." And if that weren't the answer, the
only other possible answers are, "that looks like garbage from
[insert a person's real name here]," or "I don't know who submitted
that".
In fact it's way safer from the perspective of the pseudon or anon
to feed an idea for a bugfix or feature out-of-band to an extant
developer. Then it's in the "handwriting" of the public developer.
Moreover, even if you ratchet up the surveillance (say, having
developers record themselves coding up, testing, and submitting
patches, which isn't a bad idea btw) it doesn't reveal anything more
about the identity of the anon.
It's also important from the public developer's perspective, as they
have to explicitly take responsibility for the bugfix/feature, and the
risks associated with that.
-Jonathan