8 ms·
> How do they mitigate that kind of activity without logging basic metadata like the IP address that published a package An effective mitigation for abuse/spam
by ginto 3y ago
> How do they mitigate that kind of activity without logging basic metadata like the IP address that published a package
An effective mitigation for abuse/spam is to increase its cost. One example is to require payment.
- duckmysick 3y agoNow they need to subpoena both PyPI and the payment processor. It does slow them down but effectively does nothing to "thwart future subpoenas from the total surveillance state".
- mort96 3y agoIt would not go over well if PyPI started charging people to host packages.
- ginto 3y agoCharging goes well for many online services. Hosted email, hosted VPS, and hosted SaaS are some that come to mind. Apple Store and Google Play charge to host mobile games.
- proto_lambda 3y agoThat's also a highly effective mitigation against legitimate users, especially those already disadvantaged everywhere else by a lack of disposable income.
- ginto 3y agoHow did you conclude payment equals parting with the money and not getting it back? Collateral works well for many problems in the world.