pull down to refresh

116 sats \ 3 replies \ @m0wer OP 4 Aug \ parent \ on: FYI GitHub organization owners can see contributor's country and even IP tech

It's even worse... Organization owners can see the location where any action was made from. Including:

  • PRs (open, close, comment, ...)
  • Issues (same)
  • Actions, pushes, ...

Every "write" action that you do under an organization basically.

write
compose
30 sats \ 2 replies \ @optimism 4 Aug

But ironically, what you can't see, not even in audit logs: someone made a PR on your repo and you have been discussing this for a month. Then they in all their wisdom go onto another completely unrelated repo and say a bad word. Github suspends that account.

Your discussion is gone. No trace anywhere. Only way to figure it out is to contact support and they'll tell you: the user is suspended for reasons we are not disclosing.

reply
231 sats \ 1 reply \ @m0wer OP 4 Aug

Wonderful. So if you ever need to introduce a vulnerability somewhere, just do, and then spread some hate speech in other repos to get your records cleaned up👍

reply
25 sats \ 0 replies \ @optimism 4 Aug

Exactly. Everything will be gone except the raw commit author, so make sure you set that to someone you dislike.

reply