2 ms·
He notified Github "last Friday", according to them: https://github.com/blog/1068-public-key-security-vulnerability-and-mitigation#comment-17297 https://github
by hythloday 15y ago
He notified Github "last Friday", according to them:
https://github.com/blog/1068-public-key-security-vulnerability-and-mitigation#comment-17297 https://github.com/blog/1068-public-key-security-vulnerabili...
- stock_toaster 15y ago> His previous report was fixed last friday Makes it sound like a separate issue. edit: looks like github clarified https://github.com/blog/1069-responsible-disclosure-policy https://github.com/blog/1069-responsible-disclosure-policy
- hythloday 15y agoSame exploit, different endpoint. Github agree they "should have...immediately looked for related issues": https://twitter.com/#!/technoweenie/status/176450715508686848 https://twitter.com/#!/technoweenie/status/17645071550868684... ...though as they've now unbanned his account (good on them), it's somewhat moot.
- stock_toaster 15y agoAha. Thanks for the extra info.