Anyone can access deleted and private repository data on GitHub

Re:Anyone can access deleted and private repository data on ... by cycomanic on Wednesday July 24, 2024 @06:42PM (#41062985)

I would argue that even if the behaviour was as intended, at least the fact that it was not documented was a bug (and a pretty serious one at that).

[ Parent | on HN ]

Re:Anyone can access deleted and private repository data on ... by tptacek on Wednesday July 24, 2024 @07:20PM (#41063236)

Again: you don't generally get bounties for finding "bugs"; you get them exclusively for finding qualified vulnerabilities.

[ Parent | on HN ]