4 ms·

Maybe Github can reject commits by default that contain phrases of magic keys/known strings and file combinations that contain passphrases.

• logn 12y ago
  I'd rather Github not become the Gmail of version control.
  • jagger27 12y ago
    Github is already the Gmail of version control. Isn't this the reason the attack is possible? Every file is automatically indexed for search.
    • logn 12y ago
      Yes. However I meant that I don't want Github to start developing features that involves scanning and applying AI to codebases and their users' behavior, because I think it's a temptation they start marketing that data. E.g., "Buy our engineer intelligence subscription! Find out if your job applicant is a ninja or noob!" I suppose there's an argument that the data is already public and anyone could apply that analysis, which is true. But the difference is that Github is not profiting from this; their feature development will continue to focus on private repo owners as their customers (whose interests are pretty much aligned with public repo owners).