News for hackers. Stuff that matters.
Re:Anyone can access deleted and private repository data on ... by pcthrowaway on Thursday July 25, 2024 @03:38PM (#41072538)
> Can you connect to a vanilla git server and enumerate every single hash?

If you have ssh access yes, but I don't think you can do this with just git (and of course github doesn't provide ssh access to the git repo servers)

The public distribution of commit hashes via their event log seems really irresponsible on github's part to me.

There are no comments on this comment yet.