GitHub Is Down • Hacker News Board

Re: GitHub Is Down

#91

Post by justinhj » Fri, Apr 03, 2020, 1:48 AM UTC

johnghanks wrote: post #86

meowface wrote: post #73

Earlier quoted context omitted.

Did the odd capitalization, "April 01th", and unrelated sending address not tip you off?

Yeah I gotta agree with you. How is this any different from the other 10s of thousands of variations of phishing attempts? If it's not signed and it's not from github.com or a registered subdomain, or if the URL of the action isn't _explicitly_ github.com... it's not legit. It doesn't matter if it slipped through GMail's filter or not...

In the case of the github phishing it does have a valid certificate and the host name is something that looks legit enough it will probably fool a lot of people

Re: GitHub Is Down

#92

Post by gargarplex » Fri, Apr 03, 2020, 3:05 PM UTC

rad_gruchalski wrote: post #76

gargarplex wrote: post #69

Earlier quoted context omitted.

It does, but it would've mirrored your latest commit before it went down. Anyway, here's how you connect Keybase to GitHub: https://blog.codefor.cash/2019/08/30/free-automatic-github-b... https://github.com/codeforcash/github-to-keybase-mirror Note: this was a v1, and I'm sure there are more resilient ways to do this. Critical feedback strongly encouraged (ideally along with suggestions).

Hooks ( https://git-scm.com/docs/githooks ) together with templates ( https://coderwall.com/p/jp7d5q/create-a-global-git-commit-ho... ) sound like a good alternative. Edit: I can see where your solution has an advantage. When one accepts contributions, all of that can be automated with web hooks via github. Still, having to run lambda/similar for this is a bit heavy weight. Edit 2: Considering that for a release, I w…

I'm also thinking that it would be easier to use git-hooks to push to AWS CodeCommit (in a random region that GitHub is unlikely to use) paired with CloudWatch events to invoke service backup to Keybase

Re: GitHub Is Down

#93

Post by gargarplex » Fri, Apr 03, 2020, 3:42 PM UTC

gargarplex wrote: post #92

rad_gruchalski wrote: post #76

Earlier quoted context omitted.

Hooks ( https://git-scm.com/docs/githooks ) together with templates ( https://coderwall.com/p/jp7d5q/create-a-global-git-commit-ho... ) sound like a good alternative. Edit: I can see where your solution has an advantage. When one accepts contributions, all of that can be automated with web hooks via github. Still, having to run lambda/similar for this is a bit heavy weight. Edit 2: Considering that for a release, I w…

I'm also thinking that it would be easier to use git-hooks to push to AWS CodeCommit (in a random region that GitHub is unlikely to use) paired with CloudWatch events to invoke service backup to Keybase

Of course, ideally it would be a Terraform (or similar open source stack) script so it's not dependent on AWS as a vendor... I have experienced the real pains of vendor lock-in, even with cross-region there is opportunity to improve robustness