News for hackers. Stuff that matters.

A comment on Powerful new features for businesses on GitHub.com. Parent comment

Re:Powerful new features for businesses on GitHub.com by cstejerean on Wednesday March 01, 2017 @05:00PM (#13768895)
But it's not just about having access to example corp. If I log in to GitHub from my work laptop then my company technically has access to my personal GitHub account and the repos of any other organization I happen to belong to. It goes the other way around to. If an attacker hacks my personal laptop and I'm logged into GitHub then they have access to all of my companies repositories.

There are perfectly valid reasons for segregating accounts so that there is complete separation between them.

[ Parent | on HN ]
Re:Powerful new features for businesses on GitHub.com by zawaideh on Wednesday March 01, 2017 @09:41PM (#13770974)
You company only managed your membership in the GitHub organization. It doesn't have access your personal account or the details within it.
[ Parent | on HN ]
Re:Powerful new features for businesses on GitHub.com by cstejerean on Thursday March 02, 2017 @04:58PM (#13778642)
It does if I am logged in on a company laptop and they control access to that laptop. (This is hypothetical in this case, I happen to know that the particular company I work at does not have any backdoors on my laptop).
[ Parent | on HN ]
Re:Powerful new features for businesses on GitHub.com by JoshTriplett on Wednesday March 01, 2017 @05:06PM (#13768947)
That's why I'm saying it may make sense to separate identity from access.
[ Parent | on HN ]