5 ms·

My repos were coming up as 404s. I was wondering if I had been canned...

by droptablemain 3y ago

deleted 3y ago
[deleted]
shepherdjerred 3y ago
Hah I had the same thought
- strongly-typed 3y ago
  [flagged]
  - 0xDECEA5ED 3y ago
    [flagged]
__MatrixMan__ 3y ago
The "nothing to see here" approach to access control has a lot of weird culture-consequences. I wish software would just address me like the peasant that I am, rather than trying to gaslight me into believing that my artificially limited world is the whole one.
- openthc 3y ago
  If there's nothing wrong with me, maybe there's something wrong with the universe...The universe is a spheroid region, 705 meters in diameter.
- dilap 3y ago
  I think you don't want to reveal the presence of projects by name or not -- just the name of repo could be sensitive info, potentially.
  - tmpz22 3y ago
    Except they know you've accessed it previously. Its a different threat model that leaves room for a little more agency to be given to the user.
    - malfist 3y ago
      I think if they can't access the server for authentication, it's likely they can't retrieve history either. Or know which user to pull history for
      - darkwater 3y ago
        Cookies? When you are not authenticated, it's still a 1st party.
  - mro_name 3y ago
    It shouldn't be on github then. At all.
    - mp05 3y ago
      Why the downvotes? If you want real security, self-host your Git repo.
      - lanstin 3y ago
        Which is neither difficult nor against the design of git.
      - cyberax 3y ago
        I'll bite. So you want to host a git repo. You need to manage SSH keys then, and then you'll want bug tracking and PRs for code reviews. This means that you need to host something like Gitlab, which is not free if you want features like SSO.
        junon 3y ago
- kodapoda 3y ago
  I think if you are in a corporate account and have correct access permissions to the account (i.e. URL namespace) it should not show 404. It's just super confusing.
- deleted 3y ago
  [deleted]
deleted 3y ago
[deleted]
ignoramous 3y ago
We were warned multi-deploys with big changes were incoming: "For lack of a better term, some big shit is coming at GitHub Universe." - Thomas Dohmke, CEO https://twitter.com/ashtom/status/1720319071567421679 https://twitter.com/ashtom/status/1720319071567421679
ellisv 3y ago
Not mutually exclusive - GitHub could be down AND you could be canned!
- APhoenixRises 3y ago
  No joke, but this is exactly my situation.
taf2 3y ago
Ah I was thinking it was southwest wifi!
dekhn 3y ago
Well, that explains a problem in an interview I was just administering (the interview code sample downloads a file from github). Guess I can't treat github like a CDN.
spaer 3y ago
[dead]

My repos were coming up as 404s. I was wondering if I had been canned...

deleted 3y ago

[deleted]

shepherdjerred 3y ago

Hah I had the same thought

strongly-typed 3y ago
[flagged]
- 0xDECEA5ED 3y ago
  [flagged]

__MatrixMan__ 3y ago

The "nothing to see here" approach to access control has a lot of weird culture-consequences. I wish software would just address me like the peasant that I am, rather than trying to gaslight me into believing that my artificially limited world is the whole one.

openthc 3y ago
If there's nothing wrong with me, maybe there's something wrong with the universe...The universe is a spheroid region, 705 meters in diameter.
dilap 3y ago
I think you don't want to reveal the presence of projects by name or not -- just the name of repo could be sensitive info, potentially.
- tmpz22 3y ago
  Except they know you've accessed it previously. Its a different threat model that leaves room for a little more agency to be given to the user.
  - malfist 3y ago
    I think if they can't access the server for authentication, it's likely they can't retrieve history either. Or know which user to pull history for
    - darkwater 3y ago
      Cookies? When you are not authenticated, it's still a 1st party.
- mro_name 3y ago
  It shouldn't be on github then. At all.
  - mp05 3y ago
    Why the downvotes? If you want real security, self-host your Git repo.
    - lanstin 3y ago
      Which is neither difficult nor against the design of git.
    - cyberax 3y ago
      I'll bite. So you want to host a git repo. You need to manage SSH keys then, and then you'll want bug tracking and PRs for code reviews. This means that you need to host something like Gitlab, which is not free if you want features like SSO.
      - junon 3y ago
kodapoda 3y ago
I think if you are in a corporate account and have correct access permissions to the account (i.e. URL namespace) it should not show 404. It's just super confusing.
deleted 3y ago
[deleted]

deleted 3y ago

[deleted]

ignoramous 3y ago

We were warned multi-deploys with big changes were incoming: "For lack of a better term, some big shit is coming at GitHub Universe." - Thomas Dohmke, CEO https://twitter.com/ashtom/status/1720319071567421679 https://twitter.com/ashtom/status/1720319071567421679

ellisv 3y ago

Not mutually exclusive - GitHub could be down AND you could be canned!

APhoenixRises 3y ago
No joke, but this is exactly my situation.

taf2 3y ago

Ah I was thinking it was southwest wifi!

dekhn 3y ago

Well, that explains a problem in an interview I was just administering (the interview code sample downloads a file from github). Guess I can't treat github like a CDN.

spaer 3y ago

[dead]