6 ms·
Anyone can do this. 1. Fork a repo. 2. Make a commit using someone else's email address. 3. Push to Github. You can then link to the commit in the original
by driverdan 6y ago
Anyone can do this.
1. Fork a repo.
2. Make a commit using someone else's email address.
3. Push to Github.
You can then link to the commit in the original repo and it will look like it came from someone else.
- Liquid_Fire 6y agoBut where do you get the GitHub source code for step 2?
- jsheard 6y agoWork for a company that licenses GitHub Enterprise and lift the source code from the appliance https://enterprise.github.com/faq https://enterprise.github.com/faq
- Liquid_Fire 6y agoI'm surprised that it includes a README and other development-only files. I would have expected they would have removed anything that's not necessary for actually running the site, to minimize risk.
- mike_d 6y agoIt has been a few years since I poked at it last, but there is some light obfuscation and inline comments on how to remove it. They fully expect people to peak under the hood but at least make it difficult for someone who has no idea what they are doing to break things.