maybe they just wanted to fix a few outstanding bugs..
GitHub is investigating unauthorized access to their internal repositories
161–170 of 359 posts
Re: GitHub is investigating unauthorized access to their internal repositories
#162That's the reason I stopped installing random extensions and even themes in VS Code, they are too dangerous.
Re: GitHub is investigating unauthorized access to their internal repositories
#163That's the reason I stopped installing random extensions and even themes in VS Code, they are too dangerous.
I just moved to Zed (zed.dev). Has everything I need
Re: GitHub is investigating unauthorized access to their internal repositories
#164Do they know what the attackers were after? Maybe they were just trying to help fix the availability problems.
This comment reminds me of a joke where the punchline is that a person is so poor that burglars break in to their house and leave money. Similarly, I could see ransomware groups hacking in and feeling bad for GH so they improve a few things to help them get to at leave nine fives of uptime.
It should be in their interest actually, since much of the malware is spread via GitHub.
Re: GitHub is investigating unauthorized access to their internal repositories
#165Why are half the comments in that thread AI generated? What value do they think they bring?
Re: GitHub is investigating unauthorized access to their internal repositories
#166GitHub: " Our current assessment is that the activity involved exfiltration of GitHub-internal repositories only. The attacker’s current claims of ~3,800 repositories are directionally consistent with our investigation so far." Oof https://xcancel.com/github/status/2056949169701720157
directionally, how bad is this ?
I'd say northwest
Re: GitHub is investigating unauthorized access to their internal repositories
#167Re: GitHub is investigating unauthorized access to their internal repositories
#168Do they know what the attackers were after? Maybe they were just trying to help fix the availability problems.
This comment reminds me of a joke where the punchline is that a person is so poor that burglars break in to their house and leave money. Similarly, I could see ransomware groups hacking in and feeling bad for GH so they improve a few things to help them get to at leave nine fives of uptime.
Just in case you are not aware, a joke loses its fun factor if you explain it.
Re: GitHub is investigating unauthorized access to their internal repositories
#169Re: GitHub is investigating unauthorized access to their internal repositories
#170Earlier quoted context omitted.
Security is often overlooked internally and seen as source of friction. I worked at a popular US social media firm and it wasn't hard to get a permission that allows me to delete the entire company's dataset. Often arguments around "I'm working on org-level initiative and I need to get permission to get it done" would easily get me the permission.
It _is_ a source of friction. I can think of _one_ product that allows you to set up low-friction access management, and AFAIK most users of that product don't set it up that way. Software engineers _should_ be able to request access to dev resources JIT during their day-to-day work, have that access auto-approve in >99% of cases, have it auto-expire if they don't actually use the resources, and have all of that be s…
Please name the product (that seems a good idea)