3 ms·
The title on HN is clickbait, the article mentions Gitlab users storing their own Gitlab password/tokens insecurely. It doesn't look like "Gitlab was compromise
by nicolaslem 7y ago
The title on HN is clickbait, the article mentions Gitlab users storing their own Gitlab password/tokens insecurely. It doesn't look like "Gitlab was compromised" to me.
The original title is "Critical security announcement: Suspicious git activity detected".
- sytse 7y agoCorrect, users across GitLab and GitHub as been affected and in all cases valid credentials were used. Also see https://www.bleepingcomputer.com/news/security/attackers-wiping-github-and-gitlab-repos-leave-ransom-notes/ https://www.bleepingcomputer.com/news/security/attackers-wip... We are updating our title to better reflect what happened.
- fillskills 7y agoSorry but the title still doesn't reflect the actual issue which per your link is : "Attackers Wiping GitHub and GitLab Repos, Leave Ransom Notes"
- sytse 7y agoDid you see our new title? https://gitlab.com/gitlab-com/www-gitlab-com/commit/447f2330391992a16c54427d2252b5e3995d207b https://gitlab.com/gitlab-com/www-gitlab-com/commit/447f2330...