News for hackers. Stuff that matters.

A comment on GitHub: Can no longer search code without being logged in. Parent comment

Re:GitHub: Can no longer search code without being logged in by ldoughty on Monday November 27, 2023 @10:13AM (#38433154)
Might also help with thwarting easy access to tokens/keys... especially for those that are not currently in their filtered list.

While a bad actor can certainly scrape/clone the same data... Given repos with thousands of files... Scanning by scraping vs searching vs cloning.... Search is certainly the cheapest for the attacker while the most expensive for GitHub

[ Parent | on HN ]
Re:GitHub: Can no longer search code without being logged in by Thorrez on Monday November 27, 2023 @10:24AM (#38433298)
That could be mostly solved by requiring login only for searches across all repos. Searches in a single repo could be anonymous.

In fact, that's exactly how it was until in June GitHub started requiring login for searches even in just a single repo.

[ Parent | on HN ]