Live data from Hacker News

GitHub waited 3 months to notify about potential compromise

news.ycombinator.com

41–50 of 83 posts

Re: GitHub waited 3 months to notify about potential compromise

#41

In the same minute that I learned GitHub had been acquired by Microsoft, I cancelled my pro subscription and began moving my critical repositories elsewhere. I'm old enough to remember the MS that tried to choke the life out of GNU/Linux and spread FUD about all FLOSS, the one that engaged in anti-competetive behavior during the "Browser Wars". I'm not suggesting that this blunder of a delay is related to the Microso…

No post body was provided.

Re: GitHub waited 3 months to notify about potential compromise

#42
post #11

They explained it themselves - there's no evidence of abuse/exploitation. They literally have no legal requirement to even tell you as much as they did. You should be commending them for filling you in at all.

>They explained it themselves - there's no evidence of abuse/exploitation. They literally have no legal requirement to even tell you as much as they did. You should be commending them for filling you in at all.

Do they keep logs, or is that also not a legal requirement? (See how these things can combine?)

Folks literally should be mindful no oneis obligated to do business with you if they think you're untrustworthy.

Re: GitHub waited 3 months to notify about potential compromise

#43

In the same minute that I learned GitHub had been acquired by Microsoft, I cancelled my pro subscription and began moving my critical repositories elsewhere. I'm old enough to remember the MS that tried to choke the life out of GNU/Linux and spread FUD about all FLOSS, the one that engaged in anti-competetive behavior during the "Browser Wars". I'm not suggesting that this blunder of a delay is related to the Microso…

memory of that stuff is just never ever going to die, is it? yet the same people use google, and facebook, and AWS, like those companies sit upon moral high ground. they do not. Linux succeeded and defeated Microsoft in every single way that matters to open source people, and the response is to continue to hate Microsoft for their loss? I do not understand. Just admit your motivation for saying things like this: you…

Seems like you’re being just as hostile in the other direction. If this isn’t the appropriate time to complain about Microsoft, then what is?

I can’t speak for everyone, but I continue to not like Microsoft because they don’t make a single piece of software that I like, and they’re ruined the ones I did like.

Re: GitHub waited 3 months to notify about potential compromise

#44

Earlier quoted context omitted.

> They literally have no legal requirement to even tell you as much as they did. Is ‘fulfilling legal requirements’ all you look for in a business relationship? A restaurant has no legal requirement to make this food tasty but it’s what I’m looking for when choosing where to go.

As someone who works in the reputation management sector, fulling legal requirements is crucial in establishing a presence in key markets. However, oversharing of internal information that's not required by legal requirements can lead to unnecessary reputation damage, which would lead to a decrease in value for key stakeholders. I think many engineers often overlook the business implication of disclosing security iss…

Some people are in tech because they want to build technology ethically and responsibly, not to maximise the stock price at all costs.

GH has no evidence this was not exploited. They just didn't log enough things to know if it was exploited or not.

Re: GitHub waited 3 months to notify about potential compromise

#45

In the same minute that I learned GitHub had been acquired by Microsoft, I cancelled my pro subscription and began moving my critical repositories elsewhere. I'm old enough to remember the MS that tried to choke the life out of GNU/Linux and spread FUD about all FLOSS, the one that engaged in anti-competetive behavior during the "Browser Wars". I'm not suggesting that this blunder of a delay is related to the Microso…

That’s a pretty neoliberal attitude to effecting systemic change, do you think that’s enough to mitigate those behaviors considering they crop up elsewhere and ongoing

If refusing to do business with a company whose business practices you don't like is "neoliberal" then the term has officially been stripped of any meaning, significance, or usefulness.

Re: GitHub waited 3 months to notify about potential compromise

#46

In the same minute that I learned GitHub had been acquired by Microsoft, I cancelled my pro subscription and began moving my critical repositories elsewhere. I'm old enough to remember the MS that tried to choke the life out of GNU/Linux and spread FUD about all FLOSS, the one that engaged in anti-competetive behavior during the "Browser Wars". I'm not suggesting that this blunder of a delay is related to the Microso…

memory of that stuff is just never ever going to die, is it? yet the same people use google, and facebook, and AWS, like those companies sit upon moral high ground. they do not. Linux succeeded and defeated Microsoft in every single way that matters to open source people, and the response is to continue to hate Microsoft for their loss? I do not understand. Just admit your motivation for saying things like this: you…

it's all about the lesser of multiple evils. Like voting for president

Re: GitHub waited 3 months to notify about potential compromise

#47

In the same minute that I learned GitHub had been acquired by Microsoft, I cancelled my pro subscription and began moving my critical repositories elsewhere. I'm old enough to remember the MS that tried to choke the life out of GNU/Linux and spread FUD about all FLOSS, the one that engaged in anti-competetive behavior during the "Browser Wars". I'm not suggesting that this blunder of a delay is related to the Microso…

memory of that stuff is just never ever going to die, is it? yet the same people use google, and facebook, and AWS, like those companies sit upon moral high ground. they do not. Linux succeeded and defeated Microsoft in every single way that matters to open source people, and the response is to continue to hate Microsoft for their loss? I do not understand. Just admit your motivation for saying things like this: you…

> Linux succeeded and defeated Microsoft in every single way that matters to open source people

So when someone gets a job where they're required to use Windows and spend all day in IE11 and Microsoft Office, let's say at a very large semiconductor company, they're hallucinating?

Re: GitHub waited 3 months to notify about potential compromise

#48

In the same minute that I learned GitHub had been acquired by Microsoft, I cancelled my pro subscription and began moving my critical repositories elsewhere. I'm old enough to remember the MS that tried to choke the life out of GNU/Linux and spread FUD about all FLOSS, the one that engaged in anti-competetive behavior during the "Browser Wars". I'm not suggesting that this blunder of a delay is related to the Microso…

memory of that stuff is just never ever going to die, is it? yet the same people use google, and facebook, and AWS, like those companies sit upon moral high ground. they do not. Linux succeeded and defeated Microsoft in every single way that matters to open source people, and the response is to continue to hate Microsoft for their loss? I do not understand. Just admit your motivation for saying things like this: you…

Microsoft is still doing this anti-competitive things with web browsers today. Every so often, my Windows 10 machine switches back to Edge, or adds Edge back to the task bar, or prompts me to try out Edge, "the recommended browser for Windows".

And no one is claiming that Google, Facebook, and Amazon are better. Those are not the examples I would pick to show Microsoft could do better, for sure. This is whataboutism.

Re: GitHub waited 3 months to notify about potential compromise

#49
post #47

Earlier quoted context omitted.

memory of that stuff is just never ever going to die, is it? yet the same people use google, and facebook, and AWS, like those companies sit upon moral high ground. they do not. Linux succeeded and defeated Microsoft in every single way that matters to open source people, and the response is to continue to hate Microsoft for their loss? I do not understand. Just admit your motivation for saying things like this: you…

> Linux succeeded and defeated Microsoft in every single way that matters to open source people So when someone gets a job where they're required to use Windows and spend all day in IE11 and Microsoft Office, let's say at a very large semiconductor company, they're hallucinating?

The fact that there exists people who don't get to use X is not proof that X is not the most common, or that they are hallucinating.

Re: GitHub waited 3 months to notify about potential compromise

#50

In the same minute that I learned GitHub had been acquired by Microsoft, I cancelled my pro subscription and began moving my critical repositories elsewhere. I'm old enough to remember the MS that tried to choke the life out of GNU/Linux and spread FUD about all FLOSS, the one that engaged in anti-competetive behavior during the "Browser Wars". I'm not suggesting that this blunder of a delay is related to the Microso…

memory of that stuff is just never ever going to die, is it? yet the same people use google, and facebook, and AWS, like those companies sit upon moral high ground. they do not. Linux succeeded and defeated Microsoft in every single way that matters to open source people, and the response is to continue to hate Microsoft for their loss? I do not understand. Just admit your motivation for saying things like this: you…

> yet the same people use google, and facebook, and AWS

That's a weird assumption to make, and definitely incorrect in at least some instances.

> Just admit your motivation for saying things like this: you hate Microsoft because Slashdot told you to ...

Huh? This seems like a really bizarre path to be going down. Not sure how you got there. :/

Post reply on HN