Or at all. This is actually a fairly common problem among certain types of research scientists who think software engineering is "peasant work".
I remember a friend of mine working at a research organization where several researchers lost months of work due to an unscheduled server reboot. Turns out when you log into ephemeral containers and pretend they are VMs, things go poof.
As horrible as the robbery was, I was screaming inside "WHAT ABOUT VERSION CONTROL?!??!"
For many people technology really is magic.
If he doesn’t come from a programming background version can seem foreign.
But like ya know… Dropbox. I’d be more concerned with my hard drive corrupting than anything else
I think they might still be deadlocked to this day.
Docker offers persistent volumes, so my 30 second solution would be that
... that's also a short path to dropping a user's PII in the clear.
Is github the most accessible? It is the most popular and best for discovery but a discussion around if gitlabs or bitbucket being more accessible could be had.
You make that sound like it's generically a bad thing. Having the data you used and tested with is good in many ways. Having it in the same git branch and repo as everything else is suboptimal but usually a lot better than not safekeeping it at all.
It does however come with this risk, that they let data, or Jupyter notebook output or etc. get committed.
I'm not saying what happened here is excusable -- it's not, it's ridiculously bad. But I can see a few ways how it'd happen.
To me the equal or better question is why does this person have PII in the first place? It's not necessary to do analysis. Someone should have masked or removed it before this person ever got their hands on it. There's no way a PII dataset is needed for training.