3 ms·
I also noticed the GitHub issues are full of city officials' names and email addresses, the perfect base to set up a social engineering attack. I really don't u
by cube00 6y ago
I also noticed the GitHub issues are full of city officials' names and email addresses, the perfect base to set up a social engineering attack. I really don't understand why all those GitHub issues need to be publicly accessible like this, all it takes is one team member to inadvertently post something sensitive and you're stuffed.
- prepend 6y agoCity official names and emails are usually public records and are in Boston. So it’s no more of a risk than current levels. There is a risk of posting the wrong info, but that should be acceptable given the unlikely probability of that happening and the harm of when it does. Posting a citizens form is really bad, but posting meeting minutes probably isn’t too bad. I think it’s important to consider the risk vs the benefit. How much is having better collaboration and avoiding a JIRA license worth?