News for hackers. Stuff that matters.

A comment on Repositories held for ransom by using valid credentials. Parent comment

Re:Repositories held for ransom by using valid credentials by the_duke on Saturday May 04, 2019 @07:39AM (#19825843)
They do keep disk snapshots for 2 weeks though (created twice a day).

https://about.gitlab.com/handbook/engineering/infrastructure...

[ Parent | on HN ]
Re:Repositories held for ransom by using valid credentials by sytse on Saturday May 04, 2019 @12:01PM (#19827260)
Thanks for linking to that. I’m asking inside the company about the comment that the repositories are lost. I think it is a lot of work to restore individual repositories as opposed to restoring a disk, so maybe that is why we said that.
[ Parent | on HN ]
Re:Repositories held for ransom by using valid credentials by the_duke on Saturday May 04, 2019 @03:48PM (#19828836)
Also any commits pushed between the last snapshot and the deletion would be lost too.
[ Parent | on HN ]
Re:Repositories held for ransom by using valid credentials by sytse on Saturday May 04, 2019 @11:28PM (#19830946)
Correct
[ Parent | on HN ]
Re:Repositories held for ransom by using valid credentials by ndarwincorn on Monday May 06, 2019 @07:29PM (#19844978)
Hey, since I'm having trouble getting a response from support/security and I know you're active on here, can you get someone to respond to this ticket (related to OP)? I don't usually try to publicly escalate something like this but it's urgent and the ticket's gone 24 hours+ without a response.

https://support.gitlab.com/hc/en-us/requests/120506

[ Parent | on HN ]