I built this for fun and my own notifications. I don't think there's much commercial value here since there's zero moat. But it would be nice if we could raise funds for Signal.
The bot has access to any sent messages to yourself, plus any chatter in group chats if you have enabled that. So don't use it for sensitive stuff, and use a dedicated group. It was developed to relay sensor data and such, not war plans.
Gitlab CEO just called me and apologized, will restore data shortly.
I am personally very sorry that GL got in a bad light here. They had misinterpreted my data and have acknowledged that. For comparison, I have heard nothing from GH over the last two days.
GL sent me this statement. For the record, I didn't publish vulnerable systems, I published stores that have malware.
---
Willem,
GitLab has opted to remove the list of servers that you posted in your snippet. GitLab views the exposure of the vulnerable systems as egregious and will not abide it.
While GiLab reserves the right take further action, up to and including termination (https://about.gitlab.com/terms/), we have chosen not to terminate or lock your account.
Please know this decision was not reached lightly and we appreciate your understanding on the matter.
So Ansible has the disadvantage of unclear, implicit dependencies.
The undeterministic declarative system (Puppet) has the disadvantage of unclear, missing dependencies.
I would prefer a deterministic system, so that I can validate the output by automated acceptance tests. Preferably, these tests also take into account the various upgrade paths (new->head and head^->head)
That's the main reason we've switched over from Puppet to Ansible. It has less abstraction layers, but at least its execution order is predictable. The easy learning curve for new colleagues and the compact syntax are also nice benefits.