News for hackers. Stuff that matters.

A comment on GitHub waited 3 months to notify about potential compromise. Parent comment

Re:GitHub waited 3 months to notify about potential compromise by captn3m0 on Thursday June 16, 2022 @09:38PM (#31773127)
How is tailscale mitigating this? They can’t enforce GitHub SAML at their end, right?
[ Parent | on HN ]
Re:GitHub waited 3 months to notify about potential compromise by _7gt4 on Friday June 17, 2022 @02:23AM (#31774706)
The membership API returns a 403 if no SAML session exists. Check the remedy section of the post.

This was an accidental find and GitHub has refused to document it.

[ Parent | on HN ]