88
Android syncthing repo gone and Developer profile gone private. (github.com)
submitted 1 year ago by to c/opensource@programming.dev
12 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 20 points 1 year ago (8 children)

A lot of guesses point to a repository reset: https://forum.syncthing.net/t/does-anyone-know-why-syncthing-fork-is-no-longer-available-on-github/25661

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 7 points 11 months ago (6 children)

    Looks like it's just random commenters taking random guesses because those have happened before.

    What is a “repository reset”? One commenter writes:

    There was a temporary similar “outage” back in July with rewritten history, apparently something inappropriate was recorded in the repo history they wanted cleaned out. The repo came back after that. I have no idea if this is the same thing, or if they just got tired of maintaining it.

    Seems strange to me. You can prep locally and then force-push. I don't see why rewriting history would require taking the repository down.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 4 points 11 months ago (1 child)

    Plus won't the forks on GitHub keep the history before the "reset"?
    Afaik, forks on GitHub are basically the same underlying repository, just a branch associated with another user. They won't be able to really purge anything from these other branches.
    Plus anyone who has a local copy of the repo or an automatic mirror somewhere else, will have the changes available.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 11 months ago

    Yes, forks remain as they are. Yes, the fork network has a shared data repository on GitHub.

    Consequently, rewritten history will break history compatibility, possibly requiring manual fixups on forks or work based on it.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 4 points 11 months ago (3 children)

    If he pushed something he shouldn't have online then taking it offline immediately makes a lot of sense.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 6 points 11 months ago* (2 children)

    It makes sense, but once it's pushed there is no way to know if it's been cloned or kept somewhere else. The only real mitigation is to rotate the keys or password that was leaked.
    If it's something else you can't rotate, you're screwed.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •