this post was submitted on 05 Mar 2024
149 points (77.1% liked)

Open Source

31021 readers
675 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] rutrum@lm.paradisus.day 4 points 8 months ago (5 children)

One of the problems with Yuzu (to nintendo) was that it contained the encryption keys pulled off nintendo switches. By removing commit history you actually can permanently remove this part of the code. There might be a more clever way to do this. Thats my best guess.

[–] nekusoul@lemmy.nekusoul.de 15 points 8 months ago (1 children)

Although a good guess, this looks more like the work of someone who's in way over their head and barely knows how to use git. Probably just downloaded the repo as a zip instead of cloning it through git. At least that's the vibe I get from their commit history and other repos.

So basically, this person did the right thing on accident.

[–] PM_Your_Nudes_Please@lemmy.world 1 points 8 months ago

Probably just downloaded the repo as a zip instead of cloning it through git.

FWIW, this can actually be a valid strategy, purely because a DMCA takedown will affect forks but not reuploads. Basically, if a DMCA takedown nukes a project, it also nukes any forked projects. But if you downloaded the .zip and reuploaded it, you won’t be affected by the DMCA takedown because it’s not considered a fork of the original project.

It’s a dumb workaround, but it oddly may have helped save a lot of the code simply because offline backups can’t get touched by DMCA or a nuked project.

[–] SplashJackson@lemmy.ca 6 points 8 months ago* (last edited 8 months ago)

I downloaded and set up Yuza the day before all this went down, and it did not include encryption keys. And trust me, I looked.

[–] sukhmel@programming.dev 2 points 8 months ago

Except, if someone had the repo cloned before the purge, they would retain all of the information, wouldn't they?

[–] PM_Your_Nudes_Please@lemmy.world 2 points 8 months ago

Nope, Yuzu was never distributed with keys. It could use keys that were provided by a user, but you had to add those yourself. Yuzu’s setup page even had (outdated) instructions on how to dump keys from your own Switch.

Just like how PlayStation emulators aren’t ever distributed with the BIOS, because sharing the BIOS is considered piracy.

[–] toastal@lemmy.ml 1 points 8 months ago

Even if there were keys, you could scrub the history instead of deleting it outright