Hacker News new | ask | show | jobs
by bibinou 2171 days ago
OP got his 2-letter handle via a takeover request: https://dev.to/yg/how-i-got-two-letter-username-on-github-i1...

edit: the ghost repo is cool trick. Is there a writeup anywhere?

2 comments

The OP changed his username in github less than a month ago to to the name of an inactive account? Perhaps the previous user is complaining.
Yeah, but it's not like he did something nefarious. He found an account that was inactive and requested it from support and they gave it to him. If the previous user complained, either he would get to keep it or the previous user would get it - it wouldn't be deleted/disabled and they probably would have communicated something.
The ghost repo trick sounds similar to a subdomain takeover. I can foresee this being a vector for publishing malicious code.