2024-07-24 Hacker News Top Articles and Its Summaries
1. Anyone can access deleted and private repository data on GitHub Total comment counts : 46 Summary The article discusses a vulnerability on GitHub, where deleted and private repository data can still be accessed by others. This is known as Cross Fork Object Reference (CFOR) vulnerability and occurs when one repository fork can access sensitive data from another fork, including private and deleted forks. The article provides examples of how this vulnerability can be exploited, such as accessing code from a deleted fork or accessing commits made after forking a repository....