Re:Gitlab U-turns on deleting dormant projects after backlash
by trinovantes on Friday August 05, 2022 @12:41AM
(#32351757)
Gitlab's approach also sounds like an easy way to hijack dormant projects to inject malicious code and let unsuspecting users download "updates"
[ Parent
| on HN ]
Re:Gitlab U-turns on deleting dormant projects after backlash
by L6489afSMNLNFDa on Friday August 05, 2022 @07:33AM
(#32354649)
Except that projects are namespaced under their owner, so you'd need to hijack the owner's account. They don't appear to have been proposing deleting users (or groups), just projects.
Other than that, you can fork whatever you want today...
Re:Gitlab U-turns on deleting dormant projects after backlash
by trinovantes on Friday August 05, 2022 @09:18AM
(#32355688)
OP is talking about obtaining an username from an inactive user. If they were able to obtain the username, they effective took over the namespace.