Hacker News Reader

How is tailscale mitigating this? They can’t enforce GitHub SAML at their end, right?

The membership API returns a 403 if no SAML session exists. Check the remedy section of the post.

This was an accidental find and GitHub has refused to document it.