4 ms·

Good job! Btw your site is exposing the .git directory https://www.revisionhistory.com/.git/config https://www.revisionhistory.com/.git/config Might want to s

Good job! Btw your site is exposing the .git directory https://www.revisionhistory.com/.git/config https://www.revisionhistory.com/.git/config Might want to set a filter rule for that

imachine1980_ 3y ago
there is any extension to do that or you manually do it, i have adhd so this type of tools save y life, this happens to me a few months back i kill the vm host and make new os, maybe too overboard but i works.
- geek_at 3y ago
  I'm using DotGit [1] which checks for .git and .env files for every site you visit. You wouldn't believe the things I randomly found (and reported) https://chrome.google.com/webstore/detail/dotgit/pampamgoihgcedonnphgehgondkhikel https://chrome.google.com/webstore/detail/dotgit/pampamgoihg...
dtnewman 3y ago
OMG... feedback like this is soooo helpful! Thank you. Nothing concerning in the .git directory, but yeah, I probably shouldn't be showing that. I will update my sync process to exclude that. Thank you! Edit: should be fixed now :)
- HellsMaddy 3y ago
  You were just being true to your name, by offering your revision history! On a more serious note, this is a great example of how to handle a vulnerability report - fix it, change your processes, and say thank you! (geek_at could probably have done better by disclosing this in private first, though)
  - geek_at 3y ago
    I figured there wouldn't be any secrets in the git and also if your site is on hacker news (or top of a comment thread on hn) you are glued to it so I thought they'd fix it fast
  - dtnewman 3y ago
    > You were just being true to your name, by offering your revision history! lol > geek_at could probably have done better by disclosing this in private first, though I'm glad geek_at let me know quickly and also made this a learning experience for others. No harm done.

4 ms·

Good job! Btw your site is exposing the .git directory https://www.revisionhistory.com/.git/config https://www.revisionhistory.com/.git/config Might want to s

by geek_at 3y ago

Good job! Btw your site is exposing the .git directory https://www.revisionhistory.com/.git/config https://www.revisionhistory.com/.git/config Might want to set a filter rule for that

imachine1980_ 3y ago
there is any extension to do that or you manually do it, i have adhd so this type of tools save y life, this happens to me a few months back i kill the vm host and make new os, maybe too overboard but i works.
- geek_at 3y ago
  I'm using DotGit [1] which checks for .git and .env files for every site you visit. You wouldn't believe the things I randomly found (and reported) https://chrome.google.com/webstore/detail/dotgit/pampamgoihgcedonnphgehgondkhikel https://chrome.google.com/webstore/detail/dotgit/pampamgoihg...
dtnewman 3y ago
OMG... feedback like this is soooo helpful! Thank you. Nothing concerning in the .git directory, but yeah, I probably shouldn't be showing that. I will update my sync process to exclude that. Thank you! Edit: should be fixed now :)
- HellsMaddy 3y ago
  You were just being true to your name, by offering your revision history! On a more serious note, this is a great example of how to handle a vulnerability report - fix it, change your processes, and say thank you! (geek_at could probably have done better by disclosing this in private first, though)
  - geek_at 3y ago
    I figured there wouldn't be any secrets in the git and also if your site is on hacker news (or top of a comment thread on hn) you are glued to it so I thought they'd fix it fast
  - dtnewman 3y ago
    > You were just being true to your name, by offering your revision history! lol > geek_at could probably have done better by disclosing this in private first, though I'm glad geek_at let me know quickly and also made this a learning experience for others. No harm done.