News for hackers. Stuff that matters.

A comment on Hyperscan: High-performance multiple regex matching library from Intel. Parent comment

Re:Hyperscan: High-performance multiple regex matching libra... by unixhero on Wednesday December 25, 2019 @04:08AM (#21877688)
What??? Even in a private repo?
[ Parent | on HN ]
Re:Hyperscan: High-performance multiple regex matching libra... by esnard on Wednesday December 25, 2019 @04:35AM (#21877771)
From the article:

> Since April, we’ve worked with cloud service providers in private beta to scan all changes to public repositories and public Gists for credentials (GitHub doesn’t scan private code).

Private repos are not scanned.

[ Parent | on HN ]
Re:Hyperscan: High-performance multiple regex matching libra... by clarkbw on Monday January 06, 2020 @05:46PM (#21974347)
Private repos aren't scanned and if we did offer the service to scan private repos we would only ever contact the repo owners and not the service providers. In the case of public repos we're in a race against time where bad actors are scraping the site and have automation created to use your tokens within seconds of a leak. Private repos scenarios are much simpler to deal with.
[ Parent | on HN ]
Re:Hyperscan: High-performance multiple regex matching libra... by jakeogh on Wednesday December 25, 2019 @04:34AM (#21877769)
the blog says public repos... but good question. Is it only some people that can subscribe to high entropy strings?

Github: I didnt opt-into 2FA: #439658 (3rd party auth required without 2FA)

[ Parent | on HN ]