News for hackers. Stuff that matters.

A comment on Characterizing secret leakage in public GitHub repositories.

Re:Characterizing secret leakage in public GitHub repositories by torbjorn on Saturday April 13, 2019 @11:49PM (#19657504)
Article quotes someone making this claim: > we discovered that even if commit histories are rewritten, secrets can still be recovered…. we discovered we could recover the full contents of deleted commits from GitHub with only the commit’s SHA-1 ID.

Do repo cleaning tools such as https://rtyley.github.io/bfg-repo-cleaner/ leave the original commit's SHA-1 ID intact?

[ Parent | on HN ]

There are no comments on this comment yet.