If your IP (and possible your browser) looks “suspicious” or has been used by other users before, you need to add additional information for registration on gitlab.com, which includes your mobile phone number and possibly credit card information. Since it is not possible to contribute or even report issues on open source projects without doing so, I do not think any open source project should use this service until they change that.
Screenshot: https://i.ibb.co/XsfcfHf/gitlab.png
Pita = Pain in the ass
The best part of the Gitlab UI is when it gets upgraded and you have to relearn how to find everything.
What, did they source their developers from blender?
About 10 years ago I decided I was going to pick up blender and learn it. No big deal, I used to be really good in radiant so I should be able to catch up. this shouldn’t be that strange. I’ll just pick up a YouTube video how to get started. Just click here click there go to this menu and select that.
Huh, the menu’s not even there. I go start digging around oh they moved at this point revision. Okay fine. Now everything I look up needs to have that exact point revision. It started out fine I was able to find tutorials starting in the exact version that I needed, but then I started needing more specific tutorials working with non-manifold objects crap like that. Well lo and behold somebody hasn’t covered every point revision in blender for every problem I encountered. Trying to find a video on how to do a certain action or even what the action is called now is potluck.
I couldn’t even buy a book or download a tutorial series from a previous version because even point releases at that time were night and day apart.
On The other hand I won’t try to tell you that gimp isn’t a hot mess but it’s got maybe a hundred options 25 of which are the ones I really need to use on a regular basis, and although their locations change and the shapes of the icons the names of them in the menus they’re in don’t move around that much. Blender on the other hand, there’s just s*** all over the place.
I appreciate that it might have gotten better at this point I don’t have the time anymore.
I last used it seriously like 7 or 8 years ago and it was fine. I put it on par with GitHub at the time. The ability to self host for free without too much trouble also really affected my position on it.
I haven’t really enjoyed the few times I’ve had to use it in the last couple of years, though.
No worries, gitlab is a trash Ruby on rails app anyway 😹
JK I do love gitlab, sad to see the corporate takeover. What features dont you get with the foss version? Can’t figure it out amongst the marketing cruft. Seems like it would be relatively easy to build another hosted gitlab provider.
So why does gulab need to kyc anyway? And if it’s a legal requirement, won’t GitHub do the same?
This isn’t KYC, it’s “prove you’re a human”.
I guess gitlab is just the first to realize that captchas don’t cut it anymore
Is KYC a thing outside finance?
It will be if digital ID rolls out with CBDCs.
Like others, I had an account before this was implemented. I have a couple projects on there, also mirrored to self hosted gitea. Have had people refuse/unable to contribute to the gitlab project due to the kyc requirement, so I’m thinking I will migrate to codeberg soon.
Tried to register with gitlab three times some months back to file a bug against qemu. It rejected my registration silently every time (as in, it appeared to take it but never sent a confirmation email, not even one that got mistaken for spam). I gave up on filing the bug.
For some people with less tech knowledge with git hosting, what’s the (remaining if any) advantage of Gitlab if alternatives like codeberg exists?
Forgejo ftw!
Self hosting here, also with runners to create a complete ci/cd line.
GitLab is becoming more and more like GitHub.
Well, duh. That’s the sales pitch: “Like GitHub, but cheaper.”
I think github is the cheap knockoff if anything
Yeah I’m not gonna lie GitHub has clearly been trying to keep up with gitlabs feature set not the other way around for years
Except it’s way more expensive than GitHub. They jacked up the prices pretty hard. Now it’s like $15/contributor for private orgs, and it’s like $5 on GitHub for the same and more features.
Free for self-hosting, though.
To add a few more details: After trying several times with different IPs and different browsers, I was able to register by providing only a mobile phone number once. Since that still requires personal information, this is still a very questionable process. (not to mention it took me a day to not be asked for a cred card)
Gitlab when they successfully created artificial dependency and can then demand money for even the most basic of services:
Edit: that’s the owner of gitlab ffs
Screenshot: https://removed/XsfcfHf/gitlab.png
For LW users after scumbags used image hosters to spread childprn:
I probably will move to other inctance eventually. Probably to lavander.
Policies like that are almost entirely about minimizing fraud and harassment. It really sucks for people who don’t have mobile phones that support authentication texts or whatever (since, even as you pointed out, the requirement is mostly a phone number) but it also drastically cuts down on fake/harassment accounts.
It’s disgusting.
It should be illegal to require any personal information unless you can prove that it’s literally impossible to provide your service without it, and always illegal to share that information with anyone (but a payment provider exclusively for verification purposes) for any reason.
It is still legal unless you are in EU.
It’s about data harvesting and selling not safety or any other mentioned.
Gitlab was getting attacked with thousands of spam accounts. Trying to fix the damage almost killed the company
So now not harassment, but thousands of spam accounts
Even Github does not require any personal information, so there are certainly other ways.
And Github is Microsoft who need those capabilities for basically every other website they sell.
Whereas gitlab is REALLY good software with… a website nobody ever really asked for but that still needs to exist to sell people that software.
This comes up with a lot of services. I think everyone lost their god damned minds when overwatch added phone verification?
Like, I don’t like it. But I have friends who ahve had to deal with harassment campaigns against their products (or persons) and the like and get why you would do what, on the surface, is a pretty trivial ask as a way to remove sock puppets.
what, on the surface, is a pretty trivial ask
I don’t think having my real life phone number tied to a website or game account is a trivial ask. I’d like my data to be private, especially something as real-life and tangible as a fucking phone number. Sure, there are ways around these things, you can get a fake phone number for cheap (or possibly even free), but that’s rather more effort than I’m willing to put in for most things. If I need to enter a phone number to sign up for an account for something, chances are very extremely good I’ll just decide I don’t need the account that badly. I don’t think I’m alone in this.
Which means you likely weren’t invested in engaging in a meaningful manner. That is especially important for filing a bug report on an open source project.
And I guess I just don’t view a phone number as having much value from a privacy standpoint. Basically every number is compromised to the point that it is dependent on your phone/service provider to block spam. One more site having my phone number doesn’t really bother me if it is a site I want to “engage” with.
Also: Never underestimate how much data is already out there just based on what pages you load. Privacy is long since dead and people do not understand how easy it is to cross reference to realize that “Jimmy in The Netherlands” is actually “Jim Stark at 101 Fake Street in Baltimore Maryland whose sister is Susie Clark with facebook username sclark_420”
Except phone number is super cheap.
It is still a monetary investment which is a major deterrent to bad faith accounts. This is why so many live games have a “you need to spend 1 dollar to get into the good queue” model. Shit like Escape from Tarkov where people buy accounts en masse are very much the exception.
But also? The issue is, like with mots things, lower income users. A lot of the cheaper/more affordable “pay as you go” phone plans won’t support the SMS authentication services that these models depend on. Which is why I referenced Overwatch 2 since that was actually a really “good” example of the reasons this is not a good model.
TF2. Even in official competetive mm with phone verification and spending money there are lots of bots.
won’t support the SMS authentication services that these models depend on.
Is it even legal?
There is no one solution that handles everything (or else everyone would just do that). It is always about a mixture of multiple methods.
Is it even legal?
This is the internet. Someone will always claim it is illegal in “Europe”. Nobody will care enough to verify one way or the other. And, regardless of whether it is or is not, companies don’t care because most of those regulations are very toothless either due to bureaucratic inertia or just not giving a fuck.
The fact of the matter is that this is a very common model used by a range of services and it is not going to get challenged any time soon.
Can’t say about entire Europe, especially about Kazahstan which has small part sticking out in Europe, but I’m pretry sure EU is not toothless.
User flagging works too
Credit card, blood
sacrificesample. BuT tHiNk Of ThE kIdS!
Can anyone else confirm this? As a long time user and champion of Gitlab, this is a deal-breaker for me.
Gitlab always sketched me the fuck out.
Because it was usable software or because they’re devs and can’t spell for shit? What skeeved you out a decade ago that still persists now (i.e. ‘always’) ?
deleted by creator
It’s a lab full of gits, after all
I remember when gitlab.com was the most accessible alternative to GitHub out there, but it seems they’re only interested in internal enterprise usage now. Their main page was already completely unreadable to someone not versed in enterprise tech marketing lingo, and now this.
Thankfully Gitea and Forgejo have gotten better in the meantime, with Codeberg as a flagship instance of the latter.
On a tangent, why are all of these companies pushing AI programming? This shit isn’t nearly as functional as they make it seem and all the beginners who try it are constantly asking questions about why their generated code doesn’t work
the beginners who try it are constantly asking questions about why their generated code doesn’t work
Because it ain’t here to generate all their code for them. It’s a glorified autocomplete and suggestion engine. When are people gonna get this? (not you, just in general)
I use CoPilot myself, but if you have absolutely no idea what you’re doing yourself, you and CoPilot will both quickly hit a dead end together. It doesn’t actually understand what you want the code to do. Only what is similar to what you have already written or prompted for, which may be some garbage picked up from a noob on the web somewhere. Books and research using your meatbrain are still very much needed.
It’s not in the interest of all the techbros to sell the new age AIshit as something less that can only do such small thing. They need to hype the shit out of it to get all the crazy investors money that understand nothing about it but only see AI buzzwords everywhere and need to go for it now because of FOMO.
It’s only gonna get much worse before it is toned down to appropriate usage.
Don’t even need to make it about code. I once asked what a term meant in a page full of a certain well known FOSS application’s benchmarks page. It gave me a lot of garbage that was unrelated because it made an assumption about the term, exactly the assumption I was trying to avoid. I try to deviate it away from that, and it fails to say anything coherent and then loops back and gives that initial attempt as the answer again. I was stuck unable from stopping it from hallucinating.
How? Why?
Basically, it was information you could only find by looking at the github code, and it was pretty straightforward - but the LLM sees “benchmark” and it must therefore make a bajillion assumptions.
Even if asked not to.
I have a conclusion to make. It does do the code thing too, and it is directly related. Once asked about a library, and it found a post where someone was ASKING if XYZ was what a piece of code was for - and it gave it out as if it was the answer. It wasn’t. And this is the root of the problem:
AI’s never say “I don’t know”.
It must ALWAYS know. It must ALWAYS assume something, anything, because not knowing is a crime and it won’t commit it.
And that makes them shit.
Because it brings in mad VC funding
I’m hyped about AI assisted programming and even agent driven projects (writing their own code, submitting pull requests etc) but I also agree that it seems just too early to actually put money behind it.
Its just so marginal so far, the UI/HMI has too much friction still and the output without skilled programming assistance is too limited.
VC’s and companies like OpenAI have done a really good job of propagandizing AI (LLMs). People think it’s magical and the future, so there’s money in saying you have it.
We are in the hype cycle so everyone is going bananas and there’s money to be made prior to the trough of disillusionment.
Because greedy investors are gullible and want to make money from the jobs they think AI will displace. They don’t know that this shit doesn’t work like they’ve been promised. The C-levels at Gitlab want their money (gotta love publicly traded companies), and nobody is listening to the devs who are shouting that AI is great at writing security vulnerabilities or just like, totally nonfunctioning code.
It’s their wet dream. Making software without programmers.
Execs have never cared about the technology or the engineering side of it. If you could make software by banging on a pot while dancing naked around the fire, they’d have been ok with that.
And now that AI has come along that’s basically what it looks like to them.
For my private repos, hosted on my home server, I moved from Gitlab to Forgejo (Git, artifacts and containers images) and Woodpecker for CI builds. Woodpecker is not as powerful and feature complete as Gitlab, but for simpler needs it gets the job done.
GitLab used to be awesome when it was the place to go after MS bought out GitHub. They had premium access for all public projects under a FOSS license and top-tier CI. Then as time went on, they began pulling support for various functions in a very Microsoftian EEE sort of way. First requiring credit cards fir new users to access the CI, then taking away the CI almost entirely except for a practically useless monthly allotment, then taking away the premium access for public FOSS licensed projects. If I were migrating today I would not have chosen GitLab, but it is where I settled after leaving GitHub and my projects have grown to depend on GitLab CI even if I’m now forced to run my own runners due to the extreme nerfs they’ve done to the hosted CI. I mirrored OpenRGB to Codeberg, but since the CI pipelines depend on GitLab I don’t see Codeberg becoming the main hub anytime soon unless they can execute GL CI configs. Sad to see how far GitLab has fallen though, it is unrecognizable from what it used to be as far as support for FOSS prohects goes, especially given how GitLab itself started as a FOSS project.
Enshittification, also known as platform decay, is the pattern of decreasing quality of online platforms that act as two-sided markets. - Wikipedia
Maybe it’s time to start listing the enshittification phase of a project on Wikipedia or something.
