Hacker News new | ask | show | jobs
by geek_at 260 days ago
btw you opensourced also your website

~$ curl https://foxmoss.com/.git/config [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/FoxMoss/PersonalWebsite fetch = +refs/heads/:refs/remotes/origin/ [branch "master"] remote = origin merge = refs/heads/master

1 comments

The git seems to only contain the build of the website with no source code.

The author is probably using git to push the content to the hosting server as an rsync alternative, but there does not seem to be much leaked information, apart from the url of the private repository.

It exposed their committer email (I know its already public on the site, but still)

You can wget the whole .git folder and look through the commit history, so if at any point something had been pushed which should not have been its available