News for hackers. Stuff that matters.
Re:Repositories held for ransom by using valid credentials by ishitatsuyuki on Saturday May 04, 2019 @07:09AM (#19825733)
You can access unreachable refs by means of Pull Request force pushes; even if you force push, you can still view the state at the original commit given that you have the hash of that. That plus some internal knowing of Git allows the author to guess how GitHub works this way.

As on GitLab, it's open source, so you can easily check that.

There are no comments on this comment yet.