Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Super sorry to the guy with the username reset on GitHub

discuss.systems

Post reply on HN
Print view View original

21–30 of 261 posts

Re: Super sorry to the guy with the username reset on GitHub

#23

Post by bnprks »

petesergeant wrote: post #17

I used to have an email similar to ps@qs.com, and would get a fair amount of email suggesting people would use that as their made up email. In a similar vein I’d like to apologise to knobs@bobs.com for the amount of captive portal spam you receive on my behalf

My new made-up email approach is using admin@$COMPANY in the hopes that they'll send the spam to themselves

Re: Super sorry to the guy with the username reset on GitHub

#25

Post by quickthrower2 »

Makes me think: Interesting spam vector: create a PR advertising whatever and then @ a bunch of people you scraped.

Also interesting attack vector: get a easily mistaken @ name and then see what you become reviewer on. Add malicious code to that PR and merge.

Edit: also what is stupid is at work when setting up your organisation security access you can add anyone globally in the combo search. No org-only filter is even available!

And of course most people use weird handles for their work or personal githubs. So using their UI you need to be an excellent human string comparator or make sure you copy and paste each persons handle which you meed to figure out for each person.

Attack 3: create a bunch of accounts with a similar name to people who work at target company and hope you get added to an org’s repo by mistake.

Re: Super sorry to the guy with the username reset on GitHub

#27

Post by dpedu »

quickthrower2 wrote: post #25

Makes me think: Interesting spam vector: create a PR advertising whatever and then @ a bunch of people you scraped. Also interesting attack vector: get a easily mistaken @ name and then see what you become reviewer on. Add malicious code to that PR and merge. Edit: also what is stupid is at work when setting up your organisation security access you can add anyone globally in the combo search. No org-only filter is ev…

Some people have done it by accident:

GitHub user sends notification to 400k users [2022]

https://news.ycombinator.com/item?id=31627061

Re: Super sorry to the guy with the username reset on GitHub

#29

Post by hairofadog »

muzani wrote: post #10

I try to register @null wherever I go. Most places don't allow it, and the one place that did force changed the name at one point.

There was the guy with license plate “null” who received a citation every time an officer forgot to enter a value in that field

https://www.wired.com/story/null-license-plate-landed-one-ha...

Re: Super sorry to the guy with the username reset on GitHub

#30

Post by pimlottc »

petesergeant wrote: post #17

I used to have an email similar to ps@qs.com, and would get a fair amount of email suggesting people would use that as their made up email. In a similar vein I’d like to apologise to knobs@bobs.com for the amount of captive portal spam you receive on my behalf

I’d also like to personally apologize to no@thanks.com
Post reply on HN