Dropbox admits 130 of its private GitHub repos were copied after phishing attack (opens in new tab)

(theregister.com)

14 points0xmohit3y ago4 comments

4 comments

Does anyone have any idea how the hardware key part worked? I was under the impression my yubikey would only send a key for a specific URL so there would be no way to just forward the key to actual github because it would be for the wrong domain.

cwinq3y ago

some details on this breach: https://blog.gitguardian.com/dropbox-breach-hack-github-circ...

dieselhead3y ago

Should we expect a source code dump soon?

jimmyspice3y ago

No need

For a Linux user, you can already build such a system yourself quite trivially by getting an FTP account, mounting it locally with curlftpfs, and then using SVN or CVS on the mounted filesystem. From Windows or Mac, this FTP account could be accessed through built-in software.

j / k navigate · click thread line to collapse