‹ BackHN Continuity

Thread

GitHub has not removed malicious imitation software after 3 weeks

279 points · 119 comments · hermitcrab

  1. nixgeek · · focus · HN ↗
    I see OP edited their post claiming getting to HN's front helped.

    I think the likelihood GitHub did something within 10 minutes of a post appearing on HN's front page is approximately zero.

    Nobody in GitHub Trust & Safety is sat there watching HN.

    An executive or communications professional who might have heard it got on HN, or seen it appear in a tool monitoring Microsoft and GitHub's mentions across the internet, and who then flagged the post, Trust & Safety would probably spend *more than 10 minutes* noticing the email or Teams message, then trying to find the right ticket internally. Then after locating the ticket you still have to investigate the facts, discuss, and click buttons to ban/delete the user.

    It's (much) more likely this sat in a queue until someone got to it and the timing of it being on HN is a complete coincidence.

    1. Sebguer · · focus · HN ↗
      I think you wildly underestimate how much more empowered the people monitoring social media escalations are versus the standard front-line support. In a clear-cut case like this I can absolutely imagine someone getting pinged and pressing the 'kill bad thing' button immediately after the post hitting the front page, because I've seen this happen many times.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.