Open Source@lemmy.ml · 4 months ago

Anyone can Access Deleted and Private Repository Data on GitHub

trufflesecurity.com

cross-posted to:
cybersecurity@sh.itjust.works

203

Anyone can Access Deleted and Private Repository Data on GitHub

trufflesecurity.com

communism@lemmy.ml to

Open Source@lemmy.ml · 4 months ago

cross-posted to:
cybersecurity@sh.itjust.works

Anyone can Access Deleted and Private Repository Data on GitHub ◆ Truffle Security Co.

trufflesecurity.com

You can access data from deleted forks, deleted repositories and even private repositories on GitHub. And it is available forever. This is known by GitHub, and intentionally designed that way.

Chat

Lung@lemmy.world
link
fedilink
arrow-up
13
arrow-down
2·
4 months ago
Damn that’s a huge problem

Open Source@lemmy.ml

opensource@lemmy.ml

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !opensource@lemmy.ml

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Posts must be relevant to the open source ideology
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

1.81K users / day
1.81K users / week
1.86K users / month
6.82K users / 6 months
1 local subscriber
31.4K subscribers
1.56K Posts
22.8K Comments
Modlog