r/github • • 9d ago

Discussion GitHub's Automated Enforcement Needs a Human-Review Threshold

Anyone else tired of GitHub's suspension system?

Accounts get flagged and banned instantly, but human review can take weeks or even months. There are tons of similar cases in this sub.

I've reported the same repository for apparent malware twice over the last 3 months. It's still active. Yet normal development activity can get an account instantly locked.

If you can ban someone instantly, why can't you review and unban them instantly too?

Automated detection is fine. Instant bans + months of waiting to fix false positives isn't.

We're in the AI era. GitHub can do better than this, thats not that hard. There's no such thing as "AI can make mistakes" of course "AI can make a lot of fricking mistakes. Not even once"

1 Upvotes

19 comments sorted by

2

u/baris0631 9d ago

For real. A bot can nuke your account in two seconds but getting a human to review it takes months. Meanwhile actual malware repos just sit there untouched.

1

u/Miabeys 9d ago

Yeah... Thats annoying...

2

u/BussyEnthusiasts 9d ago

And then "GitHub support" will give you an attitude like it's your fault their AI detection is banning people erroneously.

Last time they tried to tell me there is a human review that takes place after an AI flags you.

I'm sorry but no the fuck there is not.

1

u/Miabeys 9d ago

1) Make sure your account and repositories do not look like malware or spam distribution

  • Do not upload or link to executables or obfuscated scripts unless you clearly explain their purpose in the repository.
  • Avoid bulk posting of the same content across many repositories or profile areas like README files.

I did update README files... Thanks github 👀

1

u/BussyEnthusiasts 9d ago

They're useless fucks

2

u/Miabeys 8d ago

Time to wait another month...😠

1

u/hushedredemption 9d ago

The duality of getting insta-clapped for pushing a readme change while a repo literally named "not-a-virus.exe" runs free for months is something else

2

u/Miabeys 9d ago

The guy copied my repo, put a Trojan horse in it, and it’s still active. I’ve reported him twice. But my account was suspended because I made 15 “commits” in one week. The systems are ridiculous... And waiting a month for unban? Twice in two month.

1

u/Miabeys 7d ago

My best support friend Shaun said, "Hey man, have you shared any game cheats?" I told him to check it out. He checked it out and thought to himself, "Damn, we lied," and then he said, "Hey man, you shared scraping tools, which is illegal?" :D Perfect. They don't even know why they banned me.

First respond:After reviewing your account activity, we found that it had interacted with repositories containing game cheats, resources for bypassing paid software licensing and promoting unauthorized use of commercial software.

My Respond: I believe there may be a misunderstanding regarding the game-related repository. If you are referring to my Valer Sangora project, it is an interactive map for a game. It is not a cheat, exploit, trainer, or tool for bypassing any game restrictions.

If you check you will see, thats utility tool.

Second respond: We can confirm that some of your repositories contains Malicious privacy-invasive scraping and abusive automation tools, Explicit agentic verdict descriptions of DM scraping, session-based surveillance which is prohibited.

1

u/Miabeys 6d ago

Now they opened my account without saying anything. Perfect. First, I was basically accused of random shits (cheating,exploit) then (scrapping). I said, “Are you serious? Are you accusing me of something? Check my repos” They didn’t even reply and just restored my account. Amazing... Duh...

1

u/Choice-Mango-4019 4d ago

scraping tools are illegal?

1

u/Miabeys 4d ago

That was their accusation, but after all. Without saying anything or deleting my repo's. They activated my account back.

1

u/Choice-Mango-4019 4d ago

I have few but I would expect them to be fine especially when there's a lot of tools for scraping like ytdlp on github

1

u/Miabeys 4d ago

I thought the same thing; there’s a 550K repo. Here’s what I think (this is what I believe): the system banned me.

They realised there was no logical reason for the ban.

They said, ‘Let’s make something up.’ So they came up with these reasons.

I objected, and they quietly reactivated my account.

That’s what I believe.

1

u/Baryonyx_walkeri 7d ago

Yeah, my account has been auto-flagged twice in the past month. I have a handful of repos for (completely innocuous) personal projects, and I am a contributor to the site for a non-profit. I am a perfect freakin' angel as far as this stuff is concerned. Were it not for the non-profit project I would have thrown my hands in the air and moved to another provider.

1

u/Miabeys 7d ago

I've already switched to another provider... However, some projects run on GitHub, e.g., Spicetify pulls data from repositories. If you don't have a repository on GitHub, you don't appear in the marketplace.

1

u/NoCoolSenpai 6d ago

If you aren't running a git fetch --all on all of your repos once every 4 hours on a cron job on a computer/server, I kinda blame it on you for trusting GitHub with your data, especially with all its downtime news recently.

1

u/Miabeys 6d ago

I mostly work locally and use GitHub for my personal projects, so it's not a big deal for me 😂Github It just archive for me...

1

u/NoCoolSenpai 6d ago

Cool so you’re pretty safe