Meeting Minutes - Office Hours for CTI - 2026-08-28

[Siddhesh Poyarekar]

On 2026-09-10 17:39, Zack Weinberg wrote:
>> There was at least one such past change to Bugzilla configuration (from
>> memory, at a time when one of Sourceware Bugzilla and GCC Bugzilla had
>> fully restricted account creation and the other allowed account creation
>> except from a blacklist of forbidden domains, someone saw the difference,
>> guessed it was accidental and made both follow the more restrictive
>> configuration, when actually the less restrictive one had been a
>> deliberate choice).
> 
> I think I remember that incident myself; but bugzilla account *creation*
> can hardly be said to be a critical service.  If the sloppy change management
> had blacked out the entire bug database, say, that would be more "critical
> service failure" in my book.
Does blocking https for git clones count as a critical service failure? 
This had happened some months ago in an attempt (IIRC) to counter AI 
scraper bots.  The change was not reverted for a while, arguing that 
git:// was good enough but eventually it was, I don't remember the final 
justification for it all.

Sid