‹ BackHN Continuity

Thread

GitHub has not removed malicious imitation software after 3 weeks

279 points · 119 comments · hermitcrab

  1. nixgeek · · focus · HN ↗
    I see OP edited their post claiming getting to HN's front helped.

    I think the likelihood GitHub did something within 10 minutes of a post appearing on HN's front page is approximately zero.

    Nobody in GitHub Trust & Safety is sat there watching HN.

    An executive or communications professional who might have heard it got on HN, or seen it appear in a tool monitoring Microsoft and GitHub's mentions across the internet, and who then flagged the post, Trust & Safety would probably spend *more than 10 minutes* noticing the email or Teams message, then trying to find the right ticket internally. Then after locating the ticket you still have to investigate the facts, discuss, and click buttons to ban/delete the user.

    It's (much) more likely this sat in a queue until someone got to it and the timing of it being on HN is a complete coincidence.

    1. lightedman · · focus · HN ↗
      "Nobody in GitHub Trust & Safety is sat there watching HN"

      Please, any competent software dev business has eyes on this page on an hourly basis.

      I'm in aerospace and we're crawling on this site, all the way at the top levels.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.