pull down to refresh

230 sats \ 4 replies \ @Kruw 4 Aug \ on: FYI GitHub organization owners can see contributor's country and even IP tech

By "contributor", you mean anyone whose commits get merged? Or are commentors exposed as well?

write
compose
116 sats \ 3 replies \ @m0wer OP 4 Aug

It's even worse... Organization owners can see the location where any action was made from. Including:

  • PRs (open, close, comment, ...)
  • Issues (same)
  • Actions, pushes, ...

Every "write" action that you do under an organization basically.

reply
30 sats \ 2 replies \ @optimism 4 Aug

But ironically, what you can't see, not even in audit logs: someone made a PR on your repo and you have been discussing this for a month. Then they in all their wisdom go onto another completely unrelated repo and say a bad word. Github suspends that account.

Your discussion is gone. No trace anywhere. Only way to figure it out is to contact support and they'll tell you: the user is suspended for reasons we are not disclosing.

reply
231 sats \ 1 reply \ @m0wer OP 4 Aug

Wonderful. So if you ever need to introduce a vulnerability somewhere, just do, and then spread some hate speech in other repos to get your records cleaned up👍

reply
25 sats \ 0 replies \ @optimism 4 Aug

Exactly. Everything will be gone except the raw commit author, so make sure you set that to someone you dislike.

reply