4 ms·
It's pretty easy to check something kinda close to GitHub's source code to see, if you want. Just buy a copy of GitHub Enterprise, deobfuscate the files (it's
by TheDong 3y ago
It's pretty easy to check something kinda close to GitHub's source code to see, if you want.
Just buy a copy of GitHub Enterprise, deobfuscate the files (it's a fun challenge to deobfuscate them, and not all that hard), and look around to see.
It's unfortunately not open source, so we can't share and talk about the code, link to it on GitHub, or anything like that, but if GitHub Enterprise is still using such a patch, it's like the prod github is too.
- rudasn 3y agoHow do they distribute github enterprise? Like a VM or image?
- everfrustrated 3y agoPublicly downloadable VM images. Choose openstack for a generic qcow image to run with opensource tools. Docker not supported. https://enterprise.github.com/releases/3.12.1/download https://enterprise.github.com/releases/3.12.1/download
- rudasn 3y agoNice, thanks!
- iforgotpassword 3y agoAssuming they wrote an entirely new sshd in ruby or something. Otherwise why should they ship the source code to a patched-up opensshd...
- TheDong 3y agoYou can see them writing the ssh public keys that are entered into the settings page _somewhere_ in ruby, and you can then kinda guess :)