She apparently had access to employee data, not customer data. In my experience, businesses will often play a little fast-and-loose with employee data - far more so than customer data.
Though I agree it presents a bad image of GitHub's access control in general.
You moved into a direct competitor or you rolled up your own infrastructure?
I'm curious because if the company is not large, doesn't seem like much of a hassle having your own depository server.
Not the person you replied to, but we're a large company and we're using Gitlab internally, it even hooks up to LDAP which is fantastic. We still use some private Github projects too.
Re:Results of the GitHub Investigation
by kybernetyk on Monday April 21, 2014 @07:47PM
(#7624768)
We rolled our own. Git hosting is pretty straight forward. And Gitlab makes it even simpler.
Gitlab is a FOSS self hosted alternative to github.
We left github private repo hosting when they got VC funding. Because of such a scenario where we could be competing with a company that was funded by the same VC that gave GH money.
Now in a perfect world that shouldn't be a problem because the VC should never access private user data. But well ... as you see it's not a perfect world and if a wife of an employee can browse through customer data than why shouldn't this be true for the guy who gave GH a few million dollars?