You could set up a monitoring solution that alerts you if one of your devices is suddenly reachable from the internet via IPv6. It will probably never fire an alert but in your case might help you sleep better. IPv6 privacy extensions could help you too.
In practice I don't think it's really an issue. The IPv6 firewall will probably not break in a way that makes your device reachable from the internet. Even if it would, someone would have to know the IPv6 address of the device they want to target - which means that you have to connect to a system that they have control of first, otherwise it's unlikely they'll ever get it. Lastly, you'd have to run some kind of software on that device that has a vulnerability which can be exploited via network. Combine all that and it gets so unlikely that you'll get hacked this way that it's not worth worrying about.
I doubt that most consumer routers expose this functionality. IPv6 NAT is rarely needed and should be avoided. Interestingly enough I stumbled upon a use case today. No IPv6 connectivity at my office but at my dad's house. Since a WireGuard tunnel is layer 3 I can't use router advertisements and the prefix is dynamic, so private IPv6 addresses and NAT66 it is. It was an exercise out of curiosity though, route64.org works much better for IPv6 connectivity.
Overall I think Code of Conducts are a net negative. Alleged violations of them seem to be used to lend credibility to actions that otherwise would be hard(er) to justify.
Communities were doing just fine without a CoC up until they became a trend. People got banned too but the moderators couldn't hide behind a CoC to justify questionable decisions.
Communities were not doing fine. CoC didn't come out of nowhere because someone was bored. Having a CoC doesn't absolve moderators any more than having laws absolves judges from having to make good rulings.
I've been part of a lot of communities and never have I felt that a CoC was missing or needed. CoCs didn't come because they were needed but because of a social justice fad. Have a look at the Tim Peters incident with the Python community. The decision to suspend him, a core maintainer (he wrote the Zen of Python), was justified by made-up absurd alleged CoC violations. Without a CoC they couldn't have suspended him as easily without totally losing their face.
A community has to have a set of rules which most people agree on. One of the most common attacks in a moderated forum is "Oh but X did Y" and "thats not fair X can do it"
A CoC can be a simple way to "tap the sign" when someone is being a dick.
It also allows communities to set expectations at the start, not after someone has transgressed and pissed in the well.
In an ideal world, you'd just have a thing that says "don't be a dick" but that doesn't work for many and hilarious reasons. Engineers who who either have a god complex, parsing issues or empathy gaps (either learnt or inherent ) are notoriously difficult as a community to keep from getting into frothy arguments that colour everything and give off a bad smell.
I perceive "guidelines" or "rules" having a very different connotation compared to a "code of conduct."
See for, example, the SQLite team adopting the Rule of St. Benedict as their "Code of Conduct," getting criticized for it, and changing it to a "Code of Ethics" in accordance with the Rule about seeking accommodation with your adversaries.
Note also that Hipp pretty much just let any criticism for that wash over him and, from all public appearances, stayed cool and just kept working on his stuff while the loudmouths got bored and found other people to bother.
Yes but it was always this way. Any organisation with rules can suffer from rules lawyers as a lot of people who have tried to contribute to wilipedia/serve on a committee of a voluntary organisation etc will testify.
I would say incorrect. All that is true is that something is needed, but there is nothing about the problem that requires that particular poor framework for dealing with it.
It just dawned on me that CoC docs are basically HR for open source. Point to a violation and voila, that person is gone. “Sorry, nothing personal, CoC violation, there’s nothing I can do”.
Exactly. Without a CoC the persons making hard decisions have to stand behind them. With a CoC they can hide behind the CoC and wash their hands in innocence. This lowers the barrier for making questionable decisions and overall decreases honesty. We've seen this with the suspension of Python core maintainer Tim Peters.
Wow, I somehow missed all that. That's horrendous. I've always felt that a code of conduct is a tool for bureaucrats to hide behind, and episode doesn't alter my view. Thanks for sharing.
There are bad CoCs and ways to abuse them and people who do. That doesn't mean the concept of setting social expectations for a collaborative project is inherently bad. Same as for discussion forum guidelines and moderation.
No CoC is better than a bad CoC or one where interpretation is centralized to someone with an agenda. But many times a decent CoC can help newcomers in reading the room and support well-intended moderators in making judgement calls.
I also think good CoCs are small and mostly reactive. It's premature social engineering to spend energy on formulating general policies for things that happened once or twice if ever for the project.
Like, maybe wait until you actually had a couple of slop PRs before spending time, energy, and political capital on an AI contribution policy.
This is like saying "overall laws are bad" because whoever is applying them is doing so maliciously. Even in the absence of COC companies like this always find a way to justify this sort of pressure. If not a COC, it's a TOS or NDA or whatever document acronym you can find.
Nobody would accept the rule of law if we didn't all know the alternative was the local bullies with the most friends and guns declaring themselves warlords and selling your family into slavery.
An open source project without a CoC on the other hand is quite normal and harmless. Maybe some people sometimes get their feelings hurt, but CoCs obviously don't prevent that anyway. The whole thing is dumb.
I would argue that laws are “bad” if there’s no way to get a proper hearing when you’re accused of violating them. Laws should constrain both sides of the law (the person subject to them and the person enforcing them) otherwise they’re just arbitrary rules by the person with more power. And while that’s a perfectly valid way to run something, it’s dishonest to dress “arbitrary personal decisions” up in the trappings of law. And realistically that applies to all the things you listed, COC, NDA, TOS etc.
But if someone can just drag out a law and vaguely accuse someone else of violating that law and then enforce a punishment with no way for the accused to get a hearing or present their case and have a real chance to prevail, then yes I would say the law is bad.
They're a weapon of "social justice" - 90% of CoC rules are common-sense stuff that doesn't have to be said, combined with one or two "progressive" ideas shoehorned in.
I was once told I couldn’t present a calorie counting/diet app at an Elm conference because it violated their CoC about discrimination based on “body size”.
This can sometimes, in practice, be reasonable. If letting muh_dick_1488 open PRs means everyone else stops contributing, well, you're gonna have to pick a group to keep.
What is purview, and why should a software project be allowed to police all aspects of life and communication because "them's the rules and rules is rules!"
In the same way that any other organisation has rules, which they agree amongst themselves.
The joy of a free (as in not being arrested) society is that if you don't like those rules you are free not to join. Or free to moan about them repeatedly until everyone dogpiles on them to change the rules, or not.
Either way, they are allowed to make rules how they like. Just as you are allowed to not like those rules, and talk about it incessantly.
As I said, CoCs are just rules, some of which _you_ don't like
I mean, that probably depends on how extreme are the views? If you write a blog post about there being too many colored people in London, how are non-white developers supposed to collaborate with you?
Perhaps by minding your own business and focusing on the work? Nobody is forcing you to view that person's blog or to even know it exists.
If that individual's viewpoints somehow visibly leak into their work or professional communications, then you might have a case for complaint or concern.
You are just denying people their freedom of association. I personally wouldn't want to associate with a racist for the simple fact that he is a racist, no matter where they display their racism.
Sounds good - you're free to not associate. The original topic at hand was a code of conduct: this is forcing your "freedom of association" on to everyone else.
That's demanding too much from minorities IMO. OK, you should tolerate a racist colleague, what about a racist boss? Like, you know he'd like to see fewer people like you, and also gets to decide about your promotion or layoff.
Again, why are you stalking these people - just ignore it?
Furthermore, by codifying and enforcing whatever your personal viewpoints are in a code of conduct, you've summarily decided for everyone else as well.
Reading what someone has written under their own name for everyone to read is not stalking.
Also not sure what code of conduct you have in mind, but most specify that you should treat others with respect regardless of <list of protected characteristics>. That's not a viewpoint, that's a necessary condition for collaboration. If you feel an uncontrollable hate towards people of some nationalities or gender identities, it would be wise too keep it a private matter indeed, and not make this hate known to everyone
The point that you seem to be missing is that these are projects open to the public: if the person isn't espousing these ideas in the space in question, you're just as intolerant as they are to try and use the color of authority (a code of conduct, etc.) to bar them from those spaces.
"Treat with respect" is a dog whistle - easily coopted for whatever nefarious reason.
"If you do not agree with me, you will not participate in any space where I can drum up enough sympathy (headache) to have you excluded from."
That's why it was kicked into overdrive during/after Occupy Wall Street. The message of bankers screwing over everybody else in the country had clear broad appeal and people were paying attention and talking about the issue. Then, newspapers started reporting that the OWS protestors were using a "progressive stack" to silence white men and give all the talking time to the freak squad... I don't even know if that narrative had any truth or if the newspapers made it up whole cloth, but regardless it was something most American's certainly could never agree with, so OWS was overnight transformed into a social justice freak show in the eyes of the public and people stopped talking about bankers.
reply