Timeline for Are private git repositories safe?
Current License: CC BY-SA 3.0
11 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 2, 2020 at 15:50 | comment | added | Olumide | Would creating an encrypted repo address any latent security issues? | |
| Feb 4, 2019 at 1:44 | comment | added | zardilior | Great answer would include if the corporations hosting your repo, can see the code within legally as of their TOS | |
| Apr 26, 2017 at 19:30 | comment | added | Chinmaya B | Can anyone trace back the commits to my machine or the directory from which I am pushing commits?? In simple words is it possible to get access to a particular machine from Git repository? | |
| Mar 8, 2017 at 14:01 | comment | added | Maris B. | @tylerl. If they document this (lack of ACLs) in the documentation / help pages, then I don't see the problem. Users should know, how secure private repositories are. | |
| Mar 7, 2017 at 16:53 | comment | added | tylerl | @MarisB. It's difficult to do ACLs on a CDN, so obscure URLs are often used as a stand-in assuming the exposure risk is low. They intentionally made a security trade-off you don't like, but that doesn't mean it's broken. It just means that the issue tracker isn't designed to offer as strong protection as you want it to. | |
| Mar 7, 2017 at 16:38 | history | edited | tylerl | CC BY-SA 3.0 |
deleted 3 characters in body
|
| Mar 7, 2017 at 13:55 | comment | added | Maris B. | One thing is what vendor says, and other - what vendor does. For example, the attachments to the issues are not safe at all: wishmesh.com/2017/03/… | |
| May 29, 2014 at 14:55 | vote | accept | Krzysztof Wende | ||
| May 27, 2014 at 20:17 | comment | added | tylerl | @drjimbob I would agree that technically nobody knows at all, but "they" have information that you don't have about their security, policies, motivations, etc., which puts them (and definitely not you) in the best position to make assessments. That's what I'm trying to say. | |
| May 27, 2014 at 20:05 | comment | added | dr jimbob | +1 though disagree about the "but them" part of "nobody knows the answer but them". They may think everything is safe, have sensible policies, information safeguards, and do their best to keep private data private. But they may use some piece of exploitable software in their stack or employ some unethical individual who exploits flaws in internal policies. Take for example, Edward Snowden leaking private information out of the NSA that he shouldn't have had permission to access. I imagine the NSA has stricter policies around private information than github. | |
| May 27, 2014 at 19:42 | history | answered | tylerl | CC BY-SA 3.0 |