News for hackers. Stuff that matters.

A comment on Anyone can access deleted and private repository data on GitHub. Parent comment

Re:Anyone can access deleted and private repository data on ... by oxfordmale on Wednesday July 24, 2024 @07:33PM (#41063340)
As the author pointed out, the documentation was written three years after he reported it.

Beyond that is is also a batshit crazy implementation. Just I imagine AWS would still allow AWS credentials to give access to a deleted account

[ Parent | on HN ]
Re:Anyone can access deleted and private repository data on ... by account42 on Thursday July 25, 2024 @05:37AM (#41066655)
The expectations for AWS and public repository hosting are not the same. If you leaked something to a public GitHub repo you should assume that it has been cloned the second you pushed it.
[ Parent | on HN ]
Re:Anyone can access deleted and private repository data on ... by oxfordmale on Thursday July 25, 2024 @07:06AM (#41067159)
This is about access to private repos, not public ones:

"Anyone can access deleted and private repository data on GitHub"

[ Parent | on HN ]