undefined | Better HN

0 pointsbarbariangrunge3y ago0 comments

Why do they notify tencent instead of the repo owner?

0 comments

3 comments · 2 top-level

vxNsr3y ago· 1 in thread

This is my question too… why not just let the owner of the repo know, why notify Tencent at all?

oefrha3y ago

Answered elsewhere: https://news.ycombinator.com/item?id=34067625.

Instead of repeatedly having a question in an HN thread, next time try to read the source article.

BigGreenTurtle3y ago

Once a co-worker accidentally pushed an AWS key pair to his public dotfiles repo. About 30 seconds later AWS disabled the key and notified the account admin about the possibility of an account breach.

j / k navigate · click thread line to collapse