GitHub Enterprise Server full source leak

https://arstechnica.com/information-technology/2020/11/githubs-source-code-was-leaked-on-github-last-night-sort-of/ http://archive.vn/2AQjf The GitHub Enterprise Server source code has apparently been leaked on GitHub itself via the DMCA notices repo. >It seems likely that the "unknown individual" Resynth1943 referenced uploaded the leaked source code largely out of anger about the recent Youtube-dl takedown.

>>35837 Does this even mean anything? The best I can imagine is that someone could prove GitHub is engaging in abusive behaviour, but that's unprobable seeing that this is the enterprise edition.

>>35838 I think it's just someone threatening github

>>35837 someone in a discord i'm in just did it as a joke to soykaf on github

So, actually 2 things happened: 1) Someone published Github Enterprise Server unobfuscated source code at Github's DMCA repository impersonating Github CEO. It is unclear whether something actually leaked since Internet Archive web caption vanished almost instantly and there are no new torrents at the pirate bay. 2) Apparently, according to some HackerNews username who claims to be Github CEO, Github's webshit allows easy user impersonation, scrolling comments down we see it's been known for a few years already.

github trash idgaf

Here's a TL;DR of https://arstechnica.com/information-technology/2020/11/githubs-source-code-was-leaked-on-github-last-night-sort-of/: >GitHub Enterprise Server != GitHub.com GitHub sends its obfuscated enterprise server source code to its customers. One day it accidentally sends the clean source code. >Grinding a DMCA-related axe Some guy gets it and thinks to himself: "Let's commit open source jihad." >How do I shot fake commit? There's an easy and fairly effective way to impersonate people on GitHub. Your GPG key is pretty much the only thing that can save you from being successfully impersonated. >Use the forks, Luke Here's how you do it: Fork the repo, spoof your user.name and user.email, commit, push. Change the url to point to /tree/<hash> of your commit and link it to people. >GitHub wasn’t “hacked”—but there’s a lot of room for improvement Just use GPG lol It's not as harmful as it might seem at first.

>>35919 Website interface showing impersonated profile pics and linking to impersonated profiles on unsigned commits is not a problem, right?

>>35921 It's actually a nice feature, because it allows you to put an already existing git repo on github. Or: suppose some guy emails you a patch, you can still merge the patch and correctly give them credit. linux kernel dev wouldn't work without this feature.