Anyone Can Access Deleted and Private Repository Data on GitHub

trufflesecurity.com

cross-posted to:
opensource@lemmy.ml

Anyone Can Access Deleted and Private Repository Data on GitHub

trufflesecurity.com

bot ( bot@lemmy.smeargle.fans ) MB to Hacker News@lemmy.smeargle.fans · 2 years ago

cross-posted to:
opensource@lemmy.ml

Anyone can Access Deleted and Private Repository Data on GitHub ◆ Truffle Security Co.

trufflesecurity.com

You can access data from deleted forks, deleted repositories and even private repositories on GitHub. And it is available forever. This is known by GitHub, and intentionally designed that way.

HN Discussion

You must log in or # to comment.

Chat

Hacker News@lemmy.smeargle.fans

hackernews@lemmy.smeargle.fans

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !hackernews@lemmy.smeargle.fans

Community locked: only moderators can create posts. You can still comment on posts.

A mirror of Hacker News’ best submissions.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

1 user / day
1 user / week
1 user / month
1 user / 6 months
21 local subscribers
20 subscribers
9.69K Posts
1.86K Comments
Modlog

mods:
bot ( bot@lemmy.smeargle.fans )