GitHub UX has operational security risks
twitter.com
GitHub UX has operational security risks
1–10 of 16 posts
Re: GitHub UX has operational security risks
#2It does show people in your org first, but you have to search by username, not full name.
Re: GitHub UX has operational security risks
#3I agree this is a real problem. If the repo is in an organization, I would like to have to check a box like “include outside users”.
Re: GitHub UX has operational security risks
#4It does show people in your org first, but you have to search by username, not full name.
And that is a problem. Do you know gh usernames or everyone in your org? I sure know most names of the people in my org but no clue about their handles… I most often depend on gh suggestions.
Re: GitHub UX has operational security risks
#5It does show people in your org first, but you have to search by username, not full name.
And that is a problem. Do you know gh usernames or everyone in your org? I sure know most names of the people in my org but no clue about their handles… I most often depend on gh suggestions.
I know people in my org by their handles better than their names haha, guess it just depends on the culture of the place you're at.
Re: GitHub UX has operational security risks
#6Github ux is an unmitigated disaster from an operational security perspective.
In their defense, it did start out as an open-source tool.
The fact that enterprises adopted it so blindly despite this is pretty interesting.
Re: GitHub UX has operational security risks
#7Accidentally @tagging people in private PRs is always fun too!
Re: GitHub UX has operational security risks
#8Github ux is an unmitigated disaster from an operational security perspective. In their defense, it did start out as an open-source tool. The fact that enterprises adopted it so blindly despite this is pretty interesting.
It really didn't start out as an open-souce tool. Github was founded for selling private repo access for Git and got popular in the FOSS community since they provided free storage.
Re: GitHub UX has operational security risks
#9Accidentally @tagging people in private PRs is always fun too!
[deleted]
Re: GitHub UX has operational security risks
#10It does show people in your org first, but you have to search by username, not full name.
And that is a problem. Do you know gh usernames or everyone in your org? I sure know most names of the people in my org but no clue about their handles… I most often depend on gh suggestions.
Time to reinvent Java style reverse FQDN for user handles! IMO short username or alphanumerical ID is a must so as not to get into The Falsehoods.