3 ms·
Millions of GitHub repos likely vulnerable to RepoJacking, researchers say
- donatj 3y agoI reported this problem 5 years ago. GitHub employed some half fixes and called it a day. https://news.ycombinator.com/item?id=16343926 https://news.ycombinator.com/item?id=16343926 https://www.theregister.com/2018/02/10/github_account_name_reuse/ https://www.theregister.com/2018/02/10/github_account_name_r... https://donatstudios.com/GithubsTotalSecurityFacepalm https://donatstudios.com/GithubsTotalSecurityFacepalm
- cognomano 3y ago“GitHub shouldn't allow username reuse” sounds like a very good practice. Why the intelligent people inside GitHub didn’t implemented is beyond my comprehension.
- jsiepkes 3y ago> When this happens, a redirection is created to avoid breaking dependencies for projects using code from repositories that changed their name; however, if someone registers the old name, that redirection becomes invalid. Say what?! But hey GitHub is ISO 27001 certified so all is well, right?