Incident Report: Inadvertent Private Repository Disclosure

Re:Incident Report: Inadvertent Private Repository Disclosure by asolove on Friday October 28, 2016 @03:22PM (#12819736)

Does it? Except for very sophisticated organizations, I doubt it.

You don't hear about intrusions into self-hosted source repositories. Not because there are fewer, but because they likely don't have the security infrastructure in place to know that they ever happened.

[ Parent | on HN ]

Re:Incident Report: Inadvertent Private Repository Disclosure by kosievdmerwe on Friday October 28, 2016 @05:01PM (#12820650)

Also, there is very little incentive for them to advertise that they've been compromised. Whereas, Github has a duty to disclose that they've been compromised to their clients.

[ Parent | on HN ]

Re:Incident Report: Inadvertent Private Repository Disclosure by Silhouette on Friday October 28, 2016 @06:21PM (#12821266)

You don't hear about intrusions into self-hosted source repositories. Not because there are fewer,

[Edit: Multiple downvotes within moments of each other do not make calling out the above speculation any less justified.]

[ Parent | on HN ]