arcuru@lemmy.worldtoTechnology@lemmy.world•Data from deleted GitHub repos may not really be deletedEnglish
7·
2 months agoThe article is specifically about how GitHub forks are not the same as a git clone. A clone isn’t accessible from the upstream without the upstream pulling the changes, but this vulnerability points out that a fork on GitHub is accessible from the upstream without a pull, even if the fork is private.
It’s because GitHub under the hood doesn’t actually do a real clone so that they can save on disk usage.
This puts the privacy shield in the hands of a users instance admin. I like that approach, but I’m sure others will disagree.