« first day  last day (15 days later) » 

Philipp
Philipp
09:15
@WoJ: thehackernews.com/2022/04/… (yes, not GitHub's fault that someone stole OAuth tokens from other authentication providers. But the story shows that it is dangerous to rely on 3rd party services "in the cloud" which are not under your organizations control)
 
2 hours later…
WoJ
WoJ
11:32
this is exactly why I said that asking about the security of GitHub is not interesting, outside of knowing whether the servcie itself is secure (and it is, to the best of my knowledge).

Making the decision to outsource something to a 3rd party is part of the risk analysis of the operation (it includes all kinds of elements, legal, IP, privacy, subcontractors to the 3rd party, ..). Thi swill not be done by information security who can only speak of information security.
Brian Drake
Brian Drake
12:22
I think ordinary users consider an online storage service as analogous to a physical self-storage service, which is kind of how it is *meant* to work. But this analogy is false. With physical self-storage, the storage provider never directly handles your stuff. With online storage, they do: you directly give your data to the storage provider and trust them to handle it in the way they agreed to. Other users have already elaborated on the implications of this.

I will just say that OP is not an ordinary user; they are a developer. Not just any developer, but a developer working on sensitive …
 
8 hours later…
IvanGrasp
IvanGrasp
20:03
@WoJ I wonder if those companies use github.com and not a self hosted enterprise version. It's a world of difference using github vs github enterprise.

« first day  last day (15 days later) »