News for hackers. Stuff that matters.

A comment on We lost 54k GitHub stars. Parent comment

Re:We lost 54k GitHub stars by jedberg on Thursday April 14, 2022 @09:20PM (#31035658)
But that's an easy fix. If they delete the repo, delete the stars. If they make it private, indicate it is now private in some way.
[ Parent | on HN ]
Re:We lost 54k GitHub stars by judge2020 on Thursday April 14, 2022 @10:04PM (#31035923)
That's information disclosure; nothing about the repo after it's privated should be known, including name changes and deletion.
[ Parent | on HN ]
Re:We lost 54k GitHub stars by jedberg on Thursday April 14, 2022 @10:08PM (#31035958)
It’s unclear to me what the attack vector is for that disclosure.
[ Parent | on HN ]
Re:We lost 54k GitHub stars by loa_in_ on Friday April 15, 2022 @05:13AM (#31038038)
It was known and there are many sites scraping GH for metadata that will have it anyway
[ Parent | on HN ]
Re:We lost 54k GitHub stars by judge2020 on Friday April 15, 2022 @01:18PM (#31042834)
Not whether or not a repo exists after it's set private.
[ Parent | on HN ]
Re:We lost 54k GitHub stars by loa_in_ on Friday April 15, 2022 @08:27PM (#31047683)
This information is useless. It leaks nothing but name and existence of something once public (that vanished from public view). Most importantly it's not confidential or critical in any way
[ Parent | on HN ]