4 ms·
As I understand it, for all you know, there were other intrusions anyway and you'd have to go looking for them and clean up after them anyway as soon as you lea
by ben0x539 15y ago
As I understand it, for all you know, there were other intrusions anyway and you'd have to go looking for them and clean up after them anyway as soon as you learned that there was an exploit. Whether one dude actually posted something under someone else's name doesn't affect that there has been a huge hole in github for (apparently?) years.
- marshray 15y agoRight. As if this guy who reported it was the only one at the time who could have pwned Github with it. For all we know, this bug has been abused for a long time to commit backdoors to other projects (perhaps those too big and active to notice).