Ask HN: My GitHub account got suspended without any notice

Post by rapnie » Tue, Jul 14, 2020, 4:44 PM UTC

quadrifoliate wrote: post #36

zomglings wrote: post #13

It is ridiculous that GitHub has not even responded to your support ticket. To anyone reading from GitHub, this is making me rethink my choice of GitHub as a platform, and I'm sure the same is true for other people reading this post. Your reputation is very much at stake. To anyone reading this from Gitlab, how easy is it to migrate CI/CD off of GitHub Actions to Gitlab?

I have also bookmarked this, and will be sharing it with the few Open Source projects I contribute to as evidence that we should stop using GitHub for crucial work. It's a sad thing since I think they have a more intuitive platform than GitLab or Bitbucket, but seem to be transitioning to a full-blown enterprise obsessed Microsoft division.

Post by bibinou » Tue, Jul 14, 2020, 4:45 PM UTC

mavsman wrote: post #119

bibinou wrote: post #97

Hi Yogi, I'm guessing your Github account has been hijacked. Support won't respond to your emails because it could be the attacker impersonating you, or he could still have access to your email and get info that way. This is Standard Operating Procedure I've seen applied on stolen accounts in MMO videogames involving stolen credit cards and organized crime. Sometimes wait time was 6 months with no contact, because th…

> Your 2-letter nickname and access to important projects makes your account a high-value target. For sure this. People go crazy for this stuff and sell access on the dark web ( https://gimletmedia.com/shows/reply-all/v4he6k/ )

Post by bibinou » Tue, Jul 14, 2020, 4:45 PM UTC

minxomat wrote: post #132

ygcodes wrote: post #99

Earlier quoted context omitted.

Yes I have 2FA and MFA enabled!

Another vector is takeover requests via their name squatting policy (that's how I got my username). But those requests shouldn't be approved unless the old account really is inactive. Might have been approved by mistake. Another vector is the as of yet unfixed GitHub "ghost" bug, which I discovered and detailed here: https://github.com/git-rest/spooky Note how you can read that repo, but the account https://github.co…

Post by codegeek » Tue, Jul 14, 2020, 4:48 PM UTC

MattGaiser wrote: post #118

luckylion wrote: post #73

Earlier quoted context omitted.

> If you self host your repository, your hosting provider can pull the plug and you essentially end up in square one. Yeah, but it's much, much, much less likely than some script at GitHub getting triggered and shutting your account down. And even the cheap hosting providers do have ultra-premium-platinum-support compared to Google, GitHub, Amazon etc.

> And even the cheap hosting providers do have ultra-premium-platinum-support It is an odd thing to think that GoDaddy may have more merit as a solution than Github for hosting code...

Post by quadrifoliate » Tue, Jul 14, 2020, 4:49 PM UTC

jacquesm wrote: post #114

quadrifoliate wrote: post #36

Earlier quoted context omitted.

I have also bookmarked this, and will be sharing it with the few Open Source projects I contribute to as evidence that we should stop using GitHub for crucial work. It's a sad thing since I think they have a more intuitive platform than GitLab or Bitbucket, but seem to be transitioning to a full-blown enterprise obsessed Microsoft division.

Of course it would, what else did you expect. Microsoft and open source have preciously little to do with each other regardless of how much lipstick they put on the pig. Selling Github to MS was a major mistake and one that we will all eventually end up regretting. This company is not friendly to open source unless it will find a way to milk it for profit, and even then only until that route is more profitable than a…