News for hackers. Stuff that matters.

A comment on Anyone can access deleted and private repository data on GitHub. Parent comment

Re:Anyone can access deleted and private repository data on ... by londons_explore on Wednesday July 24, 2024 @03:27PM (#41060890)
In which case, yeah, thats a vulnerability. They shouldn't allow a short hash to match up against anything but public data.
[ Parent | on HN ]
Re:Anyone can access deleted and private repository data on ... by gus_massa on Wednesday July 24, 2024 @04:16PM (#41061541)
It's common to use short hash in pull request, and then modify or rebase the commits.

The solutions are:

* Force people to use the full hash.

* Get use to a lot of dead links.

* Claim that it's a feature, not a bug.

[ Parent | on HN ]
Re:Anyone can access deleted and private repository data on ... by guipsp on Wednesday July 24, 2024 @05:47PM (#41062526)
* Force people to use the full hash for commits pushed now on?
[ Parent | on HN ]
Re:Anyone can access deleted and private repository data on ... by Dylan16807 on Thursday July 25, 2024 @02:06AM (#41065203)
* Check visibility at the time of posting.
[ Parent | on HN ]