News for hackers. Stuff that matters.

A comment on Hacked: commit to rails master on GitHub. Parent comment

Re:Hacked: commit to rails master on GitHub by bgentry on Sunday March 04, 2012 @01:25PM (#3663395)
Do you plan on notifying customers whose repos he accessed? This looks like more than just a minor breach if he was able to give himself admin rights and had read/write access to any repo.
[ Parent | on HN ]
Re:Hacked: commit to rails master on GitHub by Ecio78 on Monday March 05, 2012 @04:37AM (#3666008)
Actually the problem is not which repos he accessed (they can easily determined by looking at their logs), the problem is if/how_many other repos have been accessed by blackhats who knew this exploit before, and what kind of commit they've done to all these projects.
[ Parent | on HN ]
Re:Hacked: commit to rails master on GitHub by willlll on Sunday March 04, 2012 @02:13PM (#3663577)
Hopefully they had the proper audit logs already in place.
[ Parent | on HN ]