ptrourkeJul 25, 2024
Jeroen Ruigrok van der Werven

Anyone can Access Deleted and Private Repository Data on GitHub

You can access data from deleted forks, deleted repositories and even private repositories on GitHub. And it is available forever. This is known by GitHub, and intentionally designed that way.

https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github

#GitHub #TruffleSecurity #Repositories

Anyone can Access Deleted and Private Repository Data on GitHub ◆ Truffle Security Co.

You can access data from deleted forks, deleted repositories and even private repositories on GitHub. And it is available forever. This is known by GitHub, and intentionally designed that way.

Jul 25, 2024 at 5:12amTusky
Show threadLRJul 25, 2024
@asmodai leaky.
Show threadcatraxx Jul 25, 2024
@asmodai ohno.jpg 
Show threadMatt PalmerJul 25, 2024
@asmodai @craige GC is hard; let's go hacking!
Show threadMichaelJul 25, 2024
@asmodai Intersting and well written, easy to understand how this is catching people out.
Show threadThomas A Caswell Jul 25, 2024
@asmodai I feel this article should have lead with "GitHub has clearly documented this behavior and it is not a real problem, but here are some mild consequence that you might not have expected"