186
Copilot exposes private GitHub pages, some removed by Microsoft
(arstechnica.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 28 Feb 2025
186 points (98.9% liked)
Programming
28322 readers
655 users here now
Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!
Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.
Hope you enjoy the instance!
Rules
Rules
- Follow the programming.dev instance rules
- Keep content related to programming in some way
- If you're posting long videos try to add in some form of tldr for those who don't want to watch videos
Wormhole
Follow the wormhole through a path of communities !webdev@programming.dev
founded 3 years ago
MODERATORS
Kind of a nothing burger.
The repo was listed as public and archived. It's not clear from the article but I suspect that the "private" information is just a copy of what was made public and not the information added after it was made private.
When a code repository is shut down on github the expectation is that it's removed. We're all aware that the internet will never forget that API key you accidentally committed once but the expectation was always that it wouldn't be github itself doing the remembering and openly sharing it with others.
According to the article it was Bing and not GitHub.
"According to the article it was Microsoft and not Microsoft."
Do you see now how silly you sound?
From an ownership perspective, sure. But it’s still different from the implication that github is leaking currently private repositories.
Github actually does that too, in some cases at least.
https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github