5 ms·
A Github account, for one possible example.
by Symbiote 3y ago
A Github account, for one possible example.
- pizzalife 3y agoWell, why? It just seems risky. Everything you make on your work laptop / during work hours is typically owned by your employer. If your employer is paying you to contribute to OSS, don't use your personal github account. Just don't ever mix personal and company accounts on company hardware.
- electroly 3y agoNote that if you do make a second account, at least one of them must be a paid account. A single person cannot have multiple free accounts and GitHub does not care if it's because one is for work; it's in the TOS.
- 2devnull 3y agoThere is no way around that restriction either.
- computerfriend 3y agoI have blissfully been unaware of this. Have even linked free accounts with the account switcher. I'd say this is fairly unenforced.
- da768 3y agoThe typical work contract also extends to outside work hours and personal devices.
- deathanatos 3y agoThis is why I use a separate Github account for work? (& then just rotate the credentials on it when you part ways with the employer.) Some of my co-workers even do a Github account per employment.
- _boffin_ 3y agoThat’s me—a GitHub account per employer with employee email.
- _boffin_ 3y agoDoesn’t matter. No personal stuff on company devices. I just don’t understand any rational otherwise.
- babypuncher 3y agoSo you just don't listen to music at work?
- _boffin_ 3y agoDo you have a phone and headphones?
- babypuncher 3y agoOK, so now I can't hear notifications on my computer, or control my music playback with my keyboard.
- 2devnull 3y agoIf you use your phone at work, doesn’t that then become discoverable in the legal sense?
- brobinson 3y agoThere's a huge difference between using your personal Spotify account at work and using your personal Github account at work.
- yjftsjthsd-h 3y agoOkay, I'll bite; what about a github account? You don't generally own code you write for an employer, so why would you be an personal repos from a company machine? (Likewise, there's generally no good reason for the company to have access to personal repos, so those security domains should never overlap)
- bsimpson 3y agoEven among engineers, most people don't think like a security engineer. I'm sure there are plenty of people who have access to their company's private repos through their personal GitHub accounts.
- icedchai 3y agoAt every company I've worked for, past 12+ years, this has been the rule, not the exception. They invite your personal github to corporate repos.
- 0cf8612b2e1e 3y agoI have read a couple of horror stories where it then becomes impossible to separate the account once you leave the employer. No thanks. New account per job.
- icedchai 3y agoSounds like a misunderstanding. They just remove you from the org. (And if they don't, it's not your problem.)
- 0cf8612b2e1e 3y agoBut being part of an organization, don’t they have admin control over your account? Could delete all of your repos, reset your keys, access private repos, etc. Even if a tiny risk, it seems silly just to bolster the GH activity graph.