3 ms·
GitHub is a touch more difficult I’d think though. How can GitHub monitor for things like credit card numbers, addresses and SSN (as the complaint alleges they
by elliekelly 7y ago
GitHub is a touch more difficult I’d think though. How can GitHub monitor for things like credit card numbers, addresses and SSN (as the complaint alleges they were obligated) when there are legitimate reasons for a repo to have completely benign seed data belonging to no one that would constantly trip those “filters.” Even if GitHub were alerted to the data they would have no way of knowing whether they’ve identified criminal activity or practice data.
- ma2rten 7y agoI don't know. I would imagine that if a github employee came across a repository with realistic-looking data from millions of people I am guessing they would probably suspend the account.
- Spivak 7y agoI wouldn't say this is a solved problem, but there is a lot of prior art in this space. They're a little more sophisticated than grepping for a nine digit number. Identity Finder, Varonis, CPUSpider, GroundLabs, StealthBITS