News: 1604563028

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

No, GitHub's source code wasn't hacked and posted on GitHub, says GitHub CEO

(2020/11/05)


GitHub's CEO has denied that the site's source code was posted to GitHub.

News of the supposed leak and posting came from a site called [1]Resynth that linked to a Wayback Machine [2]snapshot of a GitHub repo that purported to be the work of GitHub CEO Nat Friedman and was labelled "This is GitHub.com and GitHub Enterprise."

Resynth describes itself with the following tagline: "TypeScript developer; privacy advocate. Fighting until it's right." The post about the supposed leak is titled "What do Microsoft really think about open-source?" and did say the commit is a bit suss. It also recounted an argument that the software giant's ownership of GitHub means it should walk the talk and make the site's code open.

"Some users, such as Drew DeVault, suggest Microsoft is attempting to [3]centralise open-source ," the post said. "Through closed-source applications, and proprietary extensions to Git, GitHub is seen as a platform that tries to contain open-source. An example of this is when [4]GitHub went offline for two hours , leaving thousands of open-source projects inaccessible and unusable."

Whatever the merits of that argument, Friedman said the repo is a fake-o.

On Hacker News, the CEO [5]said : "GitHub hasn't been hacked.

"We accidentally shipped an un-stripped/obfuscated tarball of our GitHub Enterprise Server source code to some customers a couple of months ago. It shares code with github.com. As others have pointed out, much of GitHub is written in Ruby."

But Friedman also wears a little blame for the situation, stating: "Git makes it trivial to impersonate unsigned commits, so we recommend people sign their commits and look for the 'verified' label on GitHub to ensure that things are as they appear to be.

"As for repo impersonation – stay tuned, we are going to make it much more obvious when you're viewing an orphaned commit.

"In summary: everything is fine, situation normal, the lark is on the wing, the snail is on the thorn, and all's right with the world."

Just don't mention the pandemic, the election, the global recession, or the fact that Denmark is about to [6]cull its national mink herd because it's feared a new coronavirus has crossed over from the furry creatures into humans. ®

Get our [7]Tech Resources



[1] https://resynth1943.net/articles/github-source-code-leak/

[2] https://web.archive.org/web/20201104050026if_/https://github.com/github/dmca/tree/565ece486c7c1652754d7b6d2b5ed9cb4097f9d5

[3] https://drewdevault.com/2020/08/27/Microsoft-plays-their-hand.html

[4] https://www.theverge.com/2020/6/29/21306674/github-down-errors-outage-june-2020

[5] https://news.ycombinator.com/item?id=24995121

[6] https://www.bbc.com/news/world-europe-54818615

[7] https://whitepapers.theregister.com/

Anonymous Coward

" An example of this is when GitHub went offline for two hours, leaving thousands of open-source projects inaccessible and unusable.”

I'll bash Microsoft as much as the next guy, but that had to be the most ridiculous comment ever.

Rather Meta

Tessier-Ashpool

C compilers that compile themselves; GitHub source on GitHub. All rather lovely concepts.

Reminds me of a computing book I bought a long time ago. In the index at the back, it featured the following entry:

Recursion

- See Recursion

They don't have a leg to stand on this stance

boltar

If they believe in open source they should open source their own code. End of. Otherwise they're just another bunch of corporate hypocrites.

Re: They don't have a leg to stand on this stance

Anonymous Coward

They actually do open source boat loads of it these days. Not everything but even the likes of Canonical keep some things under wraps.

Fundamental Transcendental Relativity :-)

amanfromMars 1

Just don’t mention pandemic, the election, the global recession, or the fact that Denmark is about to [1]cull its national mink herd because it’s feared a new coronavirus has crossed over from the furry creatures into humans.

Would the mink be thinking the converse obverse ...... a new coronavirus has crossed over from humans to furry creatures ?

[1] https://www.bbc.co.uk/news/world-europe-54818615

Delores breezed along the surface of her life like a flat stone forever
skipping along smooth water, rippling reality sporadically but oblivious
to it consistently, until she finally lost momentum, sank, and due to an
overdose of flouride as a child which caused her to suffer from chronic
apathy, doomed herself to lie forever on the floor of her life as useless
as an appendix and as lonely as a five-hundred pound barbell in a
steroid-free fitness center.
-- Winning sentence, 1990 Bulwer-Lytton bad fiction contest.