Live data from Hacker News

Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?

news.ycombinator.com

51–60 of 108 posts

Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?

#51
I wonder if you can make a creative small claims court claim against them.

Denying access to some repo where you spent x hours on which can be resolved by them paying you y dollars * x hours. And then hoping a lawyer takes pitty on you and restores the account?

Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?

#52
post #29

I'm perpetually worried (and partially prepared) for this sort of scenario, as more of my accounts require 2FA. I dread the day I lose or break my phone, have my items stolen, there's a weather disaster etc. I try to make my hobby repos public and/or backed up in multiple places as a hedge.

Don't you have a 2FA Recovery Code?

For most of them. It's a tool, but not a silver bullet

Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?

#53

I wonder if you can make a creative small claims court claim against them. Denying access to some repo where you spent x hours on which can be resolved by them paying you y dollars * x hours. And then hoping a lawyer takes pitty on you and restores the account?

That's a good idea!

I've been thinking about how they could solve this, since they accept payments; wouldn't it be possible to request a payment with a specific reference code to verify the identity? Paired with any other required identification process, documentation, etc.

Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?

#54
post #5

Earlier quoted context omitted.

There is, but it's not a phone number I have access to anymore. I changed it to the said person's phone number before I surrendered so that this exact scenario did not happen. I trusted the wrong person.

Seems like you could present this evidence to the police for an identity theft charge against the "wrong person." Or you could threaten to do so, and perhaps regain your property.

Except, read the comment again - Josh changed the account so that it referenced the other persons phone number. They did not steal his phone, and it could be framed that he gave them the account.

Accusing somebody of theft? Perhaps the police would side with the non-felon..

Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?

#55
post #48

Earlier quoted context omitted.

You sound paranoid and schizophrenic you should honestly try explaining your situation to someone you know or a professional. I think you’ll realize that your thinking is a bit delusional. I can’t really understand what you’re saying here.

Don't do this. We don't diagnose people on HN. Just flag the comment and move on, or, if you're worried, mail hn@yc. https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que... (I'm not a mod, just someone who cares a lot about this particular rule.)

The profile you responded to "techbro" was made 3 years ago, has 102 karma (i.e. 1 upvote every 10 days, on average), and has never submitted anything - zero submitted articles or profiles. My profile was made 12 years ago and has 3,118 karma (approximately averaging an upvote every 1.4 days) including lots of submissions of stuff I made, for example this Show HN that I was pleased to see make it to the front page with 36 points and lots of positive comments: https://news.ycombinator.com/item?id=43141139 (the resource itself is currently offline as I've temporarily replaced my website with 50 reasons why it's wrong to disrupt communications between a husband and wife. I'll replace my website as soon as this issue is solved.)

Right up your alley, I've actually written a cryptographic case study of some of the dynamics of this, I've just sent you a copy of it (you and I were in touch before - it was very well reviewed by professional cryptographers.) In your reply to this, please acknowledge your receipt of my email, and if you can, print it out as well, as it can become inaccessible later.

Of course, there are a lot of NSA-affiliated people who could come out of the woodworks to support parent's slander that I "sound paranoid and schizophrenic".

The reason they don't? They're witnesses in the FBI case and don't want to go to prison themselves. The FBI has already handwritten over 10,000 affidavits in this case. (They are writing by hand to avoid electronic tampering with evidence.)

I am not making a media story about it yet, which would be the next step, so there are no articles about this yet.

My reason for not doing so is not to bring extra attention to the case, but simply to solve it in a straightforward and expedient manner.

Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?

#56
WELCOME TO TANGENTIAL INJUSTICE!

Lost access to my phone, then went to Tarrant County jail awaiting trail (innocent until proven guilty but $250,000 bond where no humans or property harmed), and only was able to get a few G-M-@-1-L related accounts reset following a plea bargain to get back my freedom. Lots of corpses in that system. IYKYK.

What can you do? Ask nicely. Hope to escalate. First off though, think of Jack Handey...

If you lost your keys in lava, man, let 'em go, they're gone.

Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?

#57

I'm perpetually worried (and partially prepared) for this sort of scenario, as more of my accounts require 2FA. I dread the day I lose or break my phone, have my items stolen, there's a weather disaster etc. I try to make my hobby repos public and/or backed up in multiple places as a hedge.

Print out 2FA codes and bury them somewhere.

It's not that hard, and you feel like a proper spy doing it ;)

Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?

#58
post #2

unfortunately, the techniques you are trying in order to get access to a dormant Github account are EXACTLY the same ones that github gets spammed with every day by bad actors attempting supply chain attacks. You don't have anything that proves your identity any more than any rando on the internet in Github's eyes at least. Everything you have presented here may be convincing enough to me, but probably not to GitHub'…

Also suppose you Facebook account was compromised, that bad, sad for the person affected. May cause some media attention if the person was famous.

But if the right GitHub account is compromised, we could see massive supply chain issues. Or a big important web service with millions of users affected.

The downside of making a wrong call here is just really really big.

There are real businesses being deployed from GitHub.

Re: Ask HN: Went to prison for 18 months, lost access to my GitHub. What can I do?

#59

I'm perpetually worried (and partially prepared) for this sort of scenario, as more of my accounts require 2FA. I dread the day I lose or break my phone, have my items stolen, there's a weather disaster etc. I try to make my hobby repos public and/or backed up in multiple places as a hedge.

Yubikey in a safe deposit box is about as good as we can get, at least for the services that allow it.

Can we use multiple Yubikeys for a service?
Post reply on HN