Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: POC to show the flaw in project collaborator notifications on GitHub

github.com

Post reply on HN
Print view View original

1–10 of 17 posts

Re: Show HN: POC to show the flaw in project collaborator notifications on GitHub

#3

Post by 719Ben »

codazzo wrote: post #2

Interesting POC, I found out about it precisely in my github feed. Now, you really could have given it a different name. If you change it people will not have a problem sharing it. It's unnecessarily offensive!

I am the project creator and after some feedback I agree. The project's name has been changed.

Re: Show HN: POC to show the flaw in project collaborator notifications on GitHub

#4

Post by codazzo »

719Ben wrote: post #3
codazzo wrote: post #2

Interesting POC, I found out about it precisely in my github feed. Now, you really could have given it a different name. If you change it people will not have a problem sharing it. It's unnecessarily offensive!

I am the project creator and after some feedback I agree. The project's name has been changed.

Great!

Re: Show HN: POC to show the flaw in project collaborator notifications on GitHub

#5

Post by BinaryBullet »

719Ben wrote: post #3
codazzo wrote: post #2

Interesting POC, I found out about it precisely in my github feed. Now, you really could have given it a different name. If you change it people will not have a problem sharing it. It's unnecessarily offensive!

I am the project creator and after some feedback I agree. The project's name has been changed.

You showed up in my feed as well (multiple times). I thought this was an issue that had been fixed in the past?

Re: Show HN: POC to show the flaw in project collaborator notifications on GitHub

#6

Post by 719Ben »

BinaryBullet wrote: post #5
719Ben wrote: post #3

Earlier quoted context omitted.

I am the project creator and after some feedback I agree. The project's name has been changed.

You showed up in my feed as well (multiple times). I thought this was an issue that had been fixed in the past?

I think the fix is simple. Make people confirm that they want to be a collaborators before notifying all their followers.

Re: Show HN: POC to show the flaw in project collaborator notifications on GitHub

#7

Post by BinaryBullet »

719Ben wrote: post #6
BinaryBullet wrote: post #5

Earlier quoted context omitted.

You showed up in my feed as well (multiple times). I thought this was an issue that had been fixed in the past?

I think the fix is simple. Make people confirm that they want to be a collaborators before notifying all their followers.

Yeah... I just vaguely remember something like this popping up in the past. I guess it was a slightly different issue. Your suggestion would work, or at least only showing up in feeds until the collaboration has been accepted.

What's your /graphs/traffic page look like? Have a lot of people checked the page out?

https://github.com/719Ben/notice-me/graphs/traffic

Re: Show HN: POC to show the flaw in project collaborator notifications on GitHub

#10

Post by swang »

endel wrote: post #9

Just today there was 2 annoying GitHub users doing this, probably using your script. I always report this kind of activity to GitHub. Hopefully they'll need to do something now that you made this accessible.

Yes same here. One project was also repeated which suggests that everytime you add/remove someone their followers get a new notification. Edit: oops nevermind.
Post reply on HN