News for hackers. Stuff that matters.

A comment on Anyone can access deleted and private repository data on GitHub. Parent comment

Re:Anyone can access deleted and private repository data on ... by K0balt on Thursday July 25, 2024 @04:57AM (#41066401)
The property (“bug”) in question is an inherent and intentional property of meekly-tree type storage systems such as git.

Calling this a bug is like reporting that telnet sends information unencrypted.

The actual bug is in the way that their UX paradigm sets user expectations.

[ Parent | on HN ]
Re:Anyone can access deleted and private repository data on ... by oasisaimlessly on Thursday July 25, 2024 @10:26AM (#41069042)
s/meekly/Merkle/g
[ Parent | on HN ]
Re:Anyone can access deleted and private repository data on ... by K0balt on Friday July 26, 2024 @06:10PM (#41082768)
lol. Someday autocorrect is going to take over my social media entirely.
[ Parent | on HN ]
Re:Anyone can access deleted and private repository data on ... by yencabulator on Thursday July 25, 2024 @12:10PM (#41070324)
Don't blame Git for Github decisions.

Github chooses to store all "Github forks" in the same repository, and allow accessing things in that repository even when they are not reachable by the refs in the namespace of one "fork". That is purely a Github decision.

[ Parent | on HN ]
Re:Anyone can access deleted and private repository data on ... by K0balt on Thursday July 25, 2024 @08:29PM (#41074879)
They could have split forks off into new repos, but then they wouldn’t be forks, in the repository sense. It was never hard to just copy a repo instead of forking it. The UX just leads people into holding it wrong.
[ Parent | on HN ]