Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by geek_at | Hacker News Reader

Parent Full thread

geek_at·

Good job!

Btw your site is exposing the .git directory https://www.revisionhistory.com/.git/config

Might want to set a filter rule for that

View on HN

OMG... feedback like this is soooo helpful! Thank you. Nothing concerning in the .git directory, but yeah, I probably shouldn't be showing that. I will update my sync process to exclude that. Thank you!

Edit: should be fixed now :)

You were just being true to your name, by offering your revision history!

On a more serious note, this is a great example of how to handle a vulnerability report - fix it, change your processes, and say thank you! (geek_at could probably have done better by disclosing this in private first, though)

I figured there wouldn't be any secrets in the git and also if your site is on hacker news (or top of a comment thread on hn) you are glued to it so I thought they'd fix it fast

> You were just being true to your name, by offering your revision history!

lol

> geek_at could probably have done better by disclosing this in private first, though

I'm glad geek_at let me know quickly and also made this a learning experience for others. No harm done.

there is any extension to do that or you manually do it, i have adhd so this type of tools save y life, this happens to me a few months back i kill the vm host and make new os, maybe too overboard but i works.

I'm using DotGit [1] which checks for .git and .env files for every site you visit. You wouldn't believe the things I randomly found (and reported)

https://chrome.google.com/webstore/detail/dotgit/pampamgoihg...

Reply on news.ycombinator.com