3 ms·
Throwaway account: I enjoy scraping GitHub user data and have found it a great goldmine of data. 95% of the time I can recover an email address for a user bas
by mr_scrapey 9y ago
Throwaway account:
I enjoy scraping GitHub user data and have found it a great goldmine of data.
95% of the time I can recover an email address for a user based on their commits, even when the email is not publicly visible on GitHub.
Very insecure.
- kemiller2002 9y agoA few years ago I watched a security talk where the spearker showed how much sensitive info was in Github. There was an amazing number of passwords, and what really surprised me was that a number of them realized after they pushed the sensitive data what they did and tried to delete it. . . . . they also thought simply committing over it was the way to delete it. It is possible that several of these companies did the correct thing and changed the password after they realized their mistake, but I have a feeling not.