Web Hack List

Other nomination

Anyone can Access Deleted and Private Repository Data on GitHub

Commits pushed to a GitHub fork or upstream repository stay reachable from every repository in the fork network forever, surviving fork deletion, repository deletion and private-to-public transitions. Anyone who guesses a four-character short commit hash or reads the public events archive can retrieve deleted and private commit data, including leaked API keys.

Record

Researcher
Joe Leon

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of Joe Leon, first published at the original source. Preserved copies are kept so the citation survives its host.