--- /dev/null
+<!-- html-header type=current begin -->
+
+ <!DOCTYPE html>
+
+ <html lang="en">
+ <head>
+ <!-- Render IE9 -->
+ <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
+
+
+
+<script>window.is_euro_union = 1;</script>
+<script src="https://a.fsdn.com/con/js/sftheme/vendor/promise.polyfill.min.js"></script>
+<script src="https://a.fsdn.com/con/js/sftheme/cmp.js"></script>
+<script src="https://slashdot.org/country.js"></script>
+<script type='text/javascript'>
+if (window.is_euro_union) {
+ bizx.cmp.init({
+ // to test: 'Display UI': 'always',
+ 'Publisher Name': 'Slashdot',
+ 'Publisher Logo': 'https://a.fsdn.com/sd/sdlogo.svg',
+ 'Consent Scope': 'global group',
+ 'Consent Scope Group URL': 'https://slashdot.org/gdpr-cookies.pl',
+ });
+}
+</script>
+<link rel="stylesheet" href="//a.fsdn.com/con/css/sftheme/sandiego/cmp.css" type="text/css">
+<style type="text/css">
+.qc-cmp-publisher-logo, .qc-cmp-nav-bar-publisher-logo {
+ background-color: #016765;
+}
+</style>
+<script>
+if (!window.is_euro_union) {
+(function (s,o,n,a,r,i,z,e) {s['StackSonarObject']=r;s[r]=s[r]||function(){
+ (s[r].q=s[r].q||[]).push(arguments)},s[r].l=1*new Date();i=o.createElement(n),
+ z=o.getElementsByTagName(n)[0];i.async=1;i.src=a;z.parentNode.insertBefore(i,z)
+ })(window,document,'script','https://www.stack-sonar.com/ping.js','stackSonar');
+ stackSonar('stack-connect', '66');
+}
+</script>
+
+ <script id="before-content" type="text/javascript">
+(function () {
+ if (typeof window.sdmedia !== 'object') {
+ window.sdmedia = {};
+ }
+ if (typeof window.sdmedia.site !== 'object') {
+ window.sdmedia.site = {};
+ }
+
+ var site = window.sdmedia.site;
+ site.rootdir = "//slashdot.org";
+}());
+
+var pageload = {
+ pagemark: '425547131907250267',
+ before_content: (new Date).getTime()
+};
+function pageload_done( $, console, maybe ){
+ pageload.after_readycode = (new Date).getTime();
+ pageload.content_ready_time = pageload.content_ready - pageload.before_content;
+ pageload.script_ready_time = pageload.after_readycode - pageload.content_ready;
+ pageload.ready_time = pageload.after_readycode - pageload.before_content;
+ // Only report 1% of cases.
+ maybe || (Math.random()>0.01) || $.ajax({ data: {
+ op: 'page_profile',
+ pagemark: pageload.pagemark,
+ dom: pageload.content_ready_time,
+ js: pageload.script_ready_time
+ } });
+}
+</script>
+ <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
+
+ <title>400,000 Websites Vulnerable Through Exposed .git Directories - Slashdot</title>
+ <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+
+ <meta name="description" content="Open .git directories are a bigger cybersecurity problem than many might imagine, at least according to a Czech security researcher who discovered almost 400,000 web pages with an open .git directory possibly exposing a wide variety of data. From a report: Vladimir Smitka began his .git directory od...">
+
+ <meta name="twitter:card" content="summary">
+ <meta name="twitter:site" content="@slashdot">
+ <meta name="twitter:domain" content="tech.slashdot.org">
+ <meta property="og:url" content="https://tech.slashdot.org/story/18/09/06/1954253/400000-websites-vulnerable-through-exposed-git-directories?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29">
+
+ <meta property="og:title" content="400,000 Websites Vulnerable Through Exposed .git Directories - Slashdot">
+ <meta property="og:description" content="Open .git directories are a bigger cybersecurity problem than many might imagine, at least according to a Czech security researcher who discovered almost 400,000 web pages with an open .git directory possibly exposing a wide variety of data. From a report: Vladimir Smitka began his .git directory od...">
+
+
+
+ <meta property="og:image" content="https://a.fsdn.com/sd/topics/security_64.png">
+
+ <meta property="fb:admins" content="100000696822412">
+ <meta property="fb:page_id" content="267995220856">
+
+ <meta name="viewport" content="width=1000, user-scalable=yes, minimum-scale=0, maximum-scale=10.0" />
+ <meta name="apple-mobile-web-app-capable" content="yes">
+ <meta name="apple-mobile-web-app-status-bar-style" content="black">
+
+ <link rel="canonical" href="https://tech.slashdot.org/story/18/09/06/1954253/400000-websites-vulnerable-through-exposed-git-directories">
+
+ <link rel="alternate" media="only screen and (max-width: 640px)" href="http://m.slashdot.org/story/345540" >
+
+
+ <link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/classic.ssl.css?8f5016a67a2f2048" >
+ <!--[if IE 8]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie8-classic.ssl.css?8f5016a67a2f2048" ><![endif]-->
+ <!--[if IE 7]><link rel="stylesheet" type="text/css" media="screen, projection" href="//a.fsdn.com/sd/ie7-classic.ssl.css?8f5016a67a2f2048" ><![endif]-->
+
+
+
+
+
+
+
+ <!-- -->
+
+
+
+
+
+ <!-- SMACKS: NEW CSS -->
+ <link rel="stylesheet" href="//a.fsdn.com/sd/css/app.css?8f5016a67a2f2048">
+
+ <script type='text/javascript'>
+var _gaq = _gaq || [];
+</script>
+
+
+
+
+
+
+
+
+
+<script type="text/javascript" id="pbjs_script" data-dom="https://d3tglifpd8whs6.cloudfront.net" src="https://d3tglifpd8whs6.cloudfront.net/js/prebid/slash-story/slash-story.min.js"></script>
+<script type='text/javascript'>
+ /*global performance */
+ var googletag = window.googletag || {};
+ googletag.cmd = googletag.cmd || [];
+
+ window.Ads_disallowPersonalization = 1;
+ bizx.cmp.ifConsent('all', 'all', function(){
+ window.Ads_disallowPersonalization = 0;
+ }, function(){
+ window.Ads_disallowPersonalization = 1;
+ }, function () {
+ window.bizxPrebid.Ads.initPrebid(window.bizxPrebid.adUnits);
+ });
+</script>
+
+<!-- prep GPT ads -->
+<script type='text/javascript'>
+(function() {
+ function page_type (loc) {
+ /*
+ only four page types:
+ - Story
+ - Poll
+ - Homepage (/ only)
+ - Other (but AdOps wants 'Homepage' again)
+ */
+ var path = loc.pathname;
+ var just_the_root = /^\/?$/.test(path);
+ var story_or_poll = /^\/(story(?=\/)|submission(?=\/)|poll(?=\/|Booth|s\b))/i.exec(path);
+
+ var page_type = just_the_root ? 'homepage'
+ : story_or_poll ? story_or_poll[1]
+ : 'other'
+
+ // exceptions
+ if (page_type.toLowerCase() === 'submission')
+ page_type = 'story'; // submissions are like stories, right?
+ else if (page_type.toLowerCase() === 'other')
+ page_type = 'homepage'; // this one might move out of here
+
+ return page_type;
+ }
+ function page_section (loc) {
+ //var greek = ['alpha', 'beta', 'gamma', 'delta'].join('|');
+ //var hostwise = '^([a-z]+)(?:-(?:'+greek+'))?\\.(?:slashdot\\.org|\\.xb\\.sf\\.net)$';
+ var pathwise = '^/(?:(recent|popular|blog)|stories/([^/]+))';
+ var rootwise = '^\/?$';
+
+ //var hostwisely = new RegExp(hostwise,'i').exec(loc.hostname);
+ var pathwisely = new RegExp(pathwise,'i').exec(loc.pathname);
+ var rootwisely = new RegExp(rootwise,'i').exec(loc.pathname);
+
+ var section = (rootwisely && 'homepage')
+ || (pathwisely && (pathwisely[1] || pathwisely[2]))
+ || ''
+ ;
+
+ return section.replace(/[^_a-z]/ig, '');
+ }
+ function single_size (size) {
+ return '' + size[0] + 'x' + size[1];
+ }
+ function sz_sz (sz) {
+ var str = '';
+ var sizes = [];
+ if (sz[0] instanceof Array) {
+ for (size in sz) {
+ sizes.push(single_size(sz[size]));
+ }
+ return sizes.join(',');
+ } else {
+ return single_size(sz);
+ }
+ }
+
+ function unique_tpc_array(array1,array2) {
+ var j = array1.concat(array2);
+ j.forEach(function (v,i,a) {
+ a[i] = v.replace(/[^_a-z]/ig, '');
+ });
+ return j.filter(function (v,i,a) {
+ return v != '' && a.indexOf(v) === i;
+ });
+ }
+
+ /* LEGEND:
+ - 'sz' = "size"
+ - 'npt' = "no page type" in ad unit name
+ */
+ var tags = {
+ '728x90_A': { 'sz': [[728, 90], [970, 90], [970, 250], [980, 66]] },
+ '728x90_B': { 'sz': [728, 90] },
+ '728x90_C': { 'sz': [728, 90], 'skip': { 'homepage': 1 } },
+ 'HubIcon_200x90_A': { 'sz': [[200, 90], [220, 90]]},
+ 'PowerSwitch_980x66_A': { 'sz': [980, 66], 'skip': { 'homepage': 1 } },
+ 'PollPeel': { 'sz': [200, 90], 'skip': { 'homepage': 1 } },
+ //'VideoWidget_300x250': { 'sz': [300, 250], 'npt': 1 },
+ '300x250_A': { 'sz': [[300, 250], [300, 600], [300, 1050]] },
+ '300x250_B': { 'sz': [[300, 250], [300, 600]] },
+ '300x250_C': { 'sz': [[300, 250], [300, 600]] },
+ '300x250_D': { 'sz': [[300, 250], [300, 600]] },
+ 'Pulse_300x600_A': { 'sz': [300, 600] },
+ //'Polls_Detail_300x250_A': { 'sz': [[300, 250], [300, 600]], 'npt': 1 },
+ //'Poll_300x250_A': { 'sz': [[300, 250], [300, 600]], 'npt': 1 },
+ //'SD_Story_1x1': { 'sz': [1, 1] },
+ '1x1': { 'sz': [1, 1] }
+ };
+
+ //var network_path = '/41014381/Slashdot/';
+ var network_path = '/41014381/Slashdot/';
+ var tag_name_prefix = 'SD';
+ var tag_name_linkage = '_';
+ var tag_name_pagetype = page_type(location);
+ var tag_topic = page_section(location);
+ if(tag_name_pagetype == 'poll'){
+ tag_name_pagetype = 'Poll';
+ }
+ var before_tag_pagetyped = network_path
+ + tag_name_prefix
+ + tag_name_linkage
+ + tag_name_pagetype
+ + tag_name_linkage
+ ;
+ var before_tag_pagetypeless = network_path
+ + tag_name_prefix
+ + tag_name_linkage
+ /* + tag_name_pagetype */
+ /* + tag_name_linkage */
+ ;
+
+
+ googletag.cmd.push(function() {
+
+ function remove_sticky_top() {
+ setTimeout(function(){
+ $('#div-gpt-ad-728x90_a').parent('div').addClass('adwrap-viewed-banner');
+ $('#div-gpt-ad-728x90_a').addClass('viewableImpression');
+ }, 1000);
+ }
+ function remove_sticky_railad() {
+ setTimeout(function(){
+ $('#slashboxes .adwrap-unviewed').addClass('adwrap-viewed-railad');
+ $('.railad').addClass('viewableImpression');
+ }, 1000);
+ }
+ function viewable_imp (slot) {
+ for(var i in slot) {
+ if(typeof slot[i] !== 'string') continue;
+ switch(slot[i]){
+ case "/41014381/Slashdot/SD_homepage_728x90_A":
+ case "/41014381/Slashdot/SD_story_728x90_A":
+ case "/41014381/Slashdot/SD_Poll_728x90_A":
+ case "/41014381/Slashdot/SD_homepage_728x90_Ref_A":
+ case "/41014381/Slashdot/SD_story_728x90_Ref_A":
+ case "/41014381/Slashdot/SD_Poll_728x90_Ref_A":
+ remove_sticky_top();
+ break;
+ case "/41014381/Slashdot/SD_homepage_300x250_A":
+ case "/41014381/Slashdot/SD_story_300x250_A":
+ case "/41014381/Slashdot/SD_Poll_300x250_A":
+ case "/41014381/Slashdot/SD_homepage_300x250_Ref_A":
+ case "/41014381/Slashdot/SD_story_300x250_Ref_A":
+ case "/41014381/Slashdot/SD_Poll_300x250_Ref_A":
+ remove_sticky_railad();
+ break;
+ }
+ //if(slot[i] === "/41014381/Slashdot/SD_homepage_728x90_A") remove_sticky_top();
+ //if(slot[i] === "/41014381/Slashdot/SD_homepage_300x250_A") remove_sticky_railad();
+ }
+ }
+ function define_me_a_slot (tag) {
+ if (tags[tag].skip && tags[tag].skip[tag_name_pagetype])
+ return;
+ var sandbox_regex = /\.xb\.sf\.net$/i;
+ var full_name = tags[tag].npt // "no page type"
+ ? before_tag_pagetypeless + tag
+ : before_tag_pagetyped + tag
+ ;
+ var div_id = 'div-gpt-ad-' + tag.toLowerCase();
+
+ var service;
+ // extend jQuery and get URL query params
+ jQuery.extend({
+ getQueryParameters : function(str) {
+ return (str || document.location.search).replace(/(^\?)/,'').split("&").map(function(n){
+ return n = n.split("="),this[n[0]] = n[1],this
+ }.bind({}))[0];
+ }
+ });
+
+ var queryParams = $.getQueryParameters();
+
+ if( queryParams.source === 'autorefresh' ) {
+ full_name = full_name.replace(/(\d+x\d+)/,'$1_Ref');
+ //console.log('TAG NAME: ', full_name);
+ }
+
+ service = googletag.defineSlot(
+ full_name
+ , tags[tag].sz
+ , div_id
+ ).addService(googletag.pubads());
+
+ service.setTargeting('sz', tags[tag].sz);
+
+
+ var frontend_tpc = tag_topic.split(",");
+ var backend_tpc = [ "it", "technology", "internet", "security", "git" ];
+
+ var tpc_final = unique_tpc_array(frontend_tpc, backend_tpc);
+ service.setTargeting('tpc', tpc_final);
+ if (location.hostname.match(sandbox_regex)) {
+ service.setTargeting('test', 'adops');
+ }
+
+ }
+
+ for (tag in tags) {
+ define_me_a_slot(tag, false);
+ }
+ googletag.pubads().addEventListener('impressionViewable', function(event) {
+ viewable_imp(event.slot);
+ });
+
+ googletag.pubads().setTargeting('requestSource', 'GPT');
+ googletag.pubads().setRequestNonPersonalizedAds(window.Ads_disallowPersonalization);
+ googletag.pubads().enableAsyncRendering();
+
+
+ googletag.pubads().collapseEmptyDivs();
+ window.bizxPrebid.SAFEFRAMES = true;
+ bizxPrebid.Ads.pushToGoogle();
+ googletag.enableServices();
+ });
+})();
+</script>
+
+
+
+<!-- CrossPixel -->
+<script type="text/javascript"> try{(function(){ var cb = new Date().getTime(); var s = document.createElement("script"); s.defer = true; s.src = "//tag.crsspxl.com/s1.js?d=2397&cb="+cb; var s0 = document.getElementsByTagName('script')[0]; s0.parentNode.insertBefore(s, s0); })();}catch(e){} </script>
+
+<!-- AdBlock Check -->
+<script>
+var isAdBlockActive = true;
+</script>
+<script async src="//a.fsdn.com/sd/js/scripts/ad.js?8f5016a67a2f2048"></script>
+
+</head>
+<body class="anon firehose ">
+
+
+ <script src="//a.fsdn.com/sd/all-minified.js?8f5016a67a2f2048" type="text/javascript"></script>
+
+
+ <script type="text/javascript">
+(function(){
+var regexp=/\s*(?:\d+|many)\s+more\s*/i;
+
+
+ var auto_more_count = 1;
+
+ function auto_more(){
+ var $more_link = $('#more-experiment a');
+ $more_link.each(function(){
+ var $lastitem = $('#firehoselist>article.fhitem:visible:last');
+ if ( Bounds.intersect(window, $lastitem) ) {
+
+
+ !--auto_more_count && (auto_more=undefined);
+ // don't allow a call till the next paginate gets built and |more_possible|
+ $(document).unbind('scroll', call_auto_more);
+ }
+ });
+ };
+
+ function call_auto_more(){ auto_more && auto_more(); }
+
+
+$('#more-experiment a').
+ live('more-possible', function( event ){
+ var $more_link=$(this);
+ if ( regexp.test($more_link.text()) ) {
+
+ $(document).bind('scroll', call_auto_more);
+ } else {
+ $(document).unbind('scroll', call_auto_more);
+
+ }
+ });
+})();
+</script>
+ <!--[if lt IE 9]><script src="//a.fsdn.com/sd/html5.js"></script><![endif]-->
+
+
+ <script type="text/javascript">
+ (function() {
+ if (typeof window.janrain !== 'object') window.janrain = {};
+ if (typeof window.janrain.settings !== 'object') window.janrain.settings = {};
+
+ /* _______________ can edit below this line _______________ */
+
+ janrain.settings.tokenUrl = 'https://slashdot.org/token_callback.pl';
+ janrain.settings.type = 'embed';
+ janrain.settings.appId = 'ggidemlconlmjciiohla';
+ janrain.settings.appUrl = 'https://login.slashdot.org';
+ janrain.settings.providers = [
+ 'googleplus',
+ 'facebook',
+ 'twitter',
+ 'linkedin'];
+ janrain.settings.providersPerPage = '5';
+ janrain.settings.format = 'one column';
+ janrain.settings.actionText = 'Sign in with';
+ janrain.settings.showAttribution = false;
+ janrain.settings.fontColor = '#666666';
+ janrain.settings.fontFamily = 'lucida grande, Helvetica, Verdana, sans-serif';
+ janrain.settings.backgroundColor = '#ffffff';
+ janrain.settings.width = '300';
+ janrain.settings.borderColor = '#cccccc';
+ janrain.settings.borderRadius = '5'; janrain.settings.buttonBorderColor = '#CCCCCC';
+ janrain.settings.buttonBorderRadius = '0';
+ janrain.settings.buttonBackgroundStyle = 'gray';
+ janrain.settings.language = '';
+ janrain.settings.linkClass = 'janrainEngage';
+
+ /* _______________ can edit above this line _______________ */
+
+ function isReady() { janrain.ready = true; };
+ if (document.addEventListener) {
+ document.addEventListener("DOMContentLoaded", isReady, false);
+ } else {
+ window.attachEvent('onload', isReady);
+ }
+
+ var e = document.createElement('script');
+ e.type = 'text/javascript';
+ e.id = 'janrainAuthWidget';
+
+ e.src = 'https://rpxnow.com/js/lib/login.slashdot.org/engage.js';
+
+ var s = document.getElementsByTagName('script')[0];
+ s.parentNode.insertBefore(e, s);
+ })();
+ </script>
+
+ <script src="//cdn-social.janrain.com/social/janrain-social.min.js"></script>
+ <script type="text/javascript">
+ (function($) {
+ $(function(){
+ janrain.settings.appUrl = "https://login.slashdot.org";
+ $twitter = $('body .janrain_twitterButton');
+ $twitter.append('<i class="icon-twitter"></i>');
+
+ janrain.settings.social = {
+ providers: [
+ "native-facebook",
+ "twitter",
+ "linkedin",
+ "native-googleplus",
+ "native-reddit"
+ ],
+ shareCountMin: "100",
+ shareCountMode: "combined"
+ };
+ });
+ })($j);
+ </script>
+ <!-- index2_variant ||-->
+
+ <!-- TABOOLA -->
+ <script type="text/javascript">
+ if (!window.is_euro_union) {
+ window._taboola = window._taboola || [];
+ _taboola.push({home:'auto'});
+ !function (e, f, u) {
+ e.async = 1;
+ e.src = u;
+ f.parentNode.insertBefore(e, f);
+ }(document.createElement('script'),
+ document.getElementsByTagName('script')[0],
+ '//cdn.taboola.com/libtrc/slashdot/loader.js');
+ }
+ </script>
+
+ <!-- html-header type=current end --><!-- header type=current begin -->
+
+
+
+ <link rel="top" title="News for nerds, stuff that matters" href="//slashdot.org/" >
+<link rel="search" title="Search Slashdot" href="//tech.slashdot.org/search.pl">
+<link rel="alternate" title="Slashdot RSS" href="http://rss.slashdot.org/Slashdot/slashdotMain" type="application/rss+xml">
+ <link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">
+
+
+ <div id="top_parent"></div>
+ <a name="topothepage"></a>
+
+ <div class="container">
+ <div class="nav-wrap">
+ <nav class="nav-primary" role="navigation" aria-label="Global Navigation">
+ <h1 class="logo">
+ <a href="//slashdot.org"><span>Slashdot</span></a>
+</h1>
+
+<ul class="nav-site">
+ <li><a href="//slashdot.org"><i class="icon-book" title="Stories"></i><span>Stories</span></a></li>
+ <li>
+ <ul class="filter-firehose">
+ <li class="nav-label">Firehose <i class="icon-angle-right"></i></li>
+ <li><a href="//slashdot.org/recent">All</a></li>
+ <li><a href="//slashdot.org/popular">Popular</a></li>
+ </ul>
+ </li>
+ <li><a href="//slashdot.org/polls"><i class="icon-chart-bar" title="Polls"></i><span>Polls</span></a></li>
+
+ <!--
+ <li><a href="//ask.slashdot.org"><i class="icon-question-circle"></i><span>Ask</span></a></li>
+
+ <li><a href="//events.slashdot.org"><i class="icon-calendar"></i><span>Events</span></a></li>
+ -->
+ <li><a href="http://deals.slashdot.org/?utm_source=slashdot&utm_medium=navbar&utm_campaign=dealshp_1" target="_blank"><i class="sd-mini" title="Deals"></i> <span>Deals</span></a></li>
+</ul>
+<a href="//slashdot.org/submission" class="btn btn-success">Submit</a>
+ </nav>
+ <nav class="nav-user" role="navigation" aria-label="user access and account controls">
+ <form id="search" class="form-inline nav-search-form" method="get" action="//slashdot.org/index2.pl">
+<!-- //tech.slashdot.org/index2.pl" -->
+ <div class="form-group">
+ <label class="sr-only" for="sitesearch">Search Slashdot</label>
+ <div class="input-group">
+ <input type="text" id="" class="" name="fhfilter" value="" placeholder="Search">
+ </div>
+ </div>
+ <button type="submit" class="btn icon-search"></button>
+</form>
+<ul class="user-access">
+
+
+ <li >
+ <a href="//slashdot.org/my/login" onclick="show_login_box(); return false;"><i class="icon-login"></i><span> Login</span></a>
+
+ </li>
+
+
+
+ <li class="nav-label">or</li>
+
+
+
+ <li >
+ <a href="//slashdot.org/my/newuser" ><i class="icon-user-add"></i><span> Sign up</span></a>
+
+ </li>
+
+
+</ul>
+ </nav>
+ </div>
+ <div class="nav-secondary-wrap">
+ <nav class="nav-secondary" role="secondary-navigation">
+ <ul>
+ <li class="nav-label">Topics: </li>
+ <li><a href="//devices.slashdot.org">Devices</a></li>
+ <li><a href="//build.slashdot.org">Build</a></li>
+ <li><a href="//entertainment.slashdot.org">Entertainment</a></li>
+ <li><a href="//technology.slashdot.org">Technology</a></li>
+ <li><a href="//slashdot.org/?fhfilter=opensource">Open Source</a></li>
+ <li><a href="//science.slashdot.org">Science</a></li>
+ <li><a href="//yro.slashdot.org">YRO</a></li>
+ <!-- <li><a href="//slashdot.org/topics.pl">more...</a></li> -->
+ </ul>
+</nav>
+<nav class="nav-social" role="social navigation">
+ <ul>
+ <li class="nav-label">Follow us:</li>
+ <li><a href="http://rss.slashdot.org/Slashdot/slashdotMain" target="_blank"><i class="icon-rss-squared"></i><span class="sr-only">RSS</span></a></li>
+ <li><a href="http://www.facebook.com/slashdot" target="_blank"><i class="icon-facebook-squared"></i><span class="sr-only">Facebook</span></a></li>
+ <li><a href="https://plus.google.com/112601993642376762846/" target="_blank"><i class="icon-gplus-squared"></i><span class="sr-only">Google+</span></a></li>
+ <li><a href="http://twitter.com/slashdot" target="_blank"><i class="icon-twitter-squared"></i><span class="sr-only">Twitter</span></a></li>
+ <li><a href="//slashdot.org/newsletter" target="_blank"><i class="icon-mail-squared"></i><span class="sr-only">Newsletter</span></a></li>
+ </ul>
+</nav>
+ </div>
+ </div>
+
+ <section>
+
+ <div class="message-bar" id="firehose-message-tray">
+ <span class="icon-quote-left"></span>
+ <p>
+
+
+ Slashdot is powered by <strong><a href="//tech.slashdot.org/submission">your submissions</a></strong>, so send in your scoop
+
+ </p>
+ </div>
+
+
+ <div id='embbeded_login_modal' class="hide">
+<form action="https://slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }" class="embedded"><fieldset style="-webkit-border-radius:10px 10px 0 0;border-radius:10px 10px 0 0;-moz-border-radius:10px 10px 0 0">
+<div style='height:25px;'> </div>
+ <input type="hidden" name="returnto" value="">
+ <input type="hidden" name="op" value="userlogin">
+ <p>
+ <label class="fleft" for="unickname">Nickname:</label>
+ <input type="text" name="unickname" value="">
+ </p>
+ <p>
+ <label class="fleft" for="upasswd">Password:</label>
+ <input type="password" name="upasswd" placeholder="6-1024 characters long">
+ </p>
+ <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label>
+ <br>
+ <hr>
+ <input type="submit" name="userlogin" value="Log In" class="fno"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a>
+</fieldset></form>
+
+<div id="janrainEngageEmbed"></div>
+<div class="actions">
+ <a class="ico close" onclick="hide_login_slider();" href=""><span>Close</span></a>
+</div>
+</div>
+
+
+ <div class="banner-wrapper">
+ <div class="adwrap adwrap-unviewed banner-contain">
+
+ <div id='div-gpt-ad-728x90_a'><script type='text/javascript'>
+googletag.cmd.push(function(){
+googletag.display('div-gpt-ad-728x90_a');});</script></div>
+ <div id='div-gpt-ad-hubicon_200x90_a'><script type='text/javascript'>
+googletag.cmd.push(function(){
+googletag.display('div-gpt-ad-hubicon_200x90_a');});</script></div>
+ </div>
+ </div>
+
+ <a name="main-articles"></a>
+
+ <!-- header type=current end --><!-- body begin -->
+
+
+
+
+
+
+
+
+
+ <style type="text/css">
+menu, menu * {
+ text-decoration:none;
+}
+
+menu[type=context] {
+ display:none;
+ position:absolute;
+ z-index:10000;
+}
+
+menu[type=context]:not(.brief) {
+ background-color:#dfdfdf;
+ margin:0;
+ padding:2px 0.5em;
+ border-style:solid;
+ border-width:1px;
+ border-color:#eeeeee #aaaaaa #aaaaaa #eeeeee;
+ -moz-border-radius-topright:.7em;
+ -webkit-border-top-right-radius: 0.7em 0.7em;
+}
+
+menu.full[type=context] > a.slash-hover:first-child {
+ -moz-border-radius-topright:.6em;
+ -webkit-border-top-right-radius: 0.6em 0.6em;
+}
+
+
+
+menu.brief[type=context] > a {
+ -moz-border-radius:.6em;
+ -webkit-border-radius: 0.6em;
+ color:#ffffff;
+ background-color:#000000;
+}
+
+/*
+span.briefmenu a.tag:not(.datatype) {
+ padding-left:.5em;
+}
+*/
+
+
+
+
+/* #tag-menu a, #feedback-menu a { */
+menu.tag-menu-admin a {
+ display:list-item;
+ list-style:none;
+ text-align:left;
+ font-weight:bold;
+ color:black;
+ padding:0.1em 0.5em;
+ margin:-0.1em -0.5em;
+ cursor:pointer;
+}
+
+
+.tags .edit-bar { position:relative; }
+article aside .share .addthis_toolbox { display:block; width:60px; float:left; }
+article aside.view_mode .share { min-width:120px; padding-top:.5em; }
+#firehose.list article header h2 {padding-left: 20px; !important}
+.novote .vote { display:none; }
+
+.vote > a, .votedup > a, .voteddown > a {
+ display:inline-block;
+ height:22px;
+ width:22px;
+ margin: 2px 10px 0 0;
+ color:rgb(255,255,255);
+ text-decoration:none;
+ line-height:22px;
+ text-align:center;
+ font-weight:bold;
+ font-size:14px;
+ border-width:1px;
+ border-style:solid;
+ border-color:rgba(0,0,0,0.5);
+}
+
+.vote > a, .votedup > a, .voteddown > a {color:rgb(0,0,0);}
+
+article.fhitem-submission h2 .vote > a, article.fhitem-submission h2 .votedup > a, article.fhitem-submission h2 .voteddown > a { border-color:rgba(0,0,0,0.15); }
+.vote .up, .vote .down, .votedup .up, .votedup .down, .voteddown .up, .voteddown .down { border-radius: 4px; -moz-border-radius: 4px; -webkit-border-radius: 4px; /* text-shadow:0 0 2px #000000; }*/}
+article:not(.fhitem-story) .vote .up,article:not(.fhitem-story) .vote .down,article:not(.fhitem-story) .votedup .up,article:not(.fhitem-story) .votedup .down,article:not(.fhitem-story) .voteddown .up,article:not(.fhitem-story) .voteddown .down { /*text-shadow:none !important; */}
+.voteddown .down, .votedup .up { margin-right: 10px; text-indent:2px; line-height:24px; }
+article:not(.fhitem-story) .votedup .up,article:not(.fhitem-story) .voteddown .down {background: rgb(174,174,174);background-image: -webkit-gradient(linear, 0% 0%, 0% 100%, from(rgb(174,174,174)), to(rgb(193,193,193)));background-image: -moz-linear-gradient(100% 100% 90deg,rgb(193,193,193), rgb(174,174,174) 100%);color:rgb(0,0,0);}
+article.fhitem-story .votedup .up,article.fhitem-story .voteddown .down {background: rgb(0,66,66);background-image: -webkit-gradient(linear, 0% 0%, 0% 100%, from(rgb(0,53,53)), to(rgb(0,102,102)));background-image: -moz-linear-gradient(100% 100% 90deg,rgb(0,102,102), rgb(0,53,53) 100%);}
+
+
+
+
+#tag-menu span.var-tag {
+font-weight:normal;
+color:#444444;
+}
+
+menu.reasons-menu a {
+padding:0 .25em 0 .25em;
+font-size:80%;
+-moz-border-radius:.5em;
+-webkit-border-radius:.5em;
+cursor:pointer;
+}
+
+menu.reasons-menu a:hover {
+background:rgb(153,153,153);
+background:-moz-linear-gradient(100% 100% 90deg, rgb(102,102,102), rgb(153,153,153) 70%) repeat scroll 0 0 rgb(102,102,102);
+background-image: -webkit-gradient(linear, 0% 0%, 0% 100%, from(rgb(153,153,153)), to(rgb(102,102,102)));
+color:#fff;
+text-decoration:none;
+font-weignt:normal;
+}
+
+article.fhitem-story menu.reasons-menu a:hover {
+background:#002323 !important;
+background:-moz-linear-gradient(100% 100% 90deg, #002323, #005353 70%) repeat scroll 0 0 #002323 !important;
+background-image: -webkit-gradient(linear, 0% 0%, 0% 100%, from(#005353), to(#002323)) !important;
+}
+
+
+menu.reasons-menu {
+ display:none;
+ margin:0;
+ padding:0;
+}
+
+div.fhitem h3 menu.reasons-menu {
+margin:0.25em 0 0;
+}
+
+div.fhitem h3 menu.reasons-menu a.tag {
+font-size:.8em;
+}
+
+#tag-menu a.slash-hover,
+#feedback-menu a.slash-hover,
+
+.tag-display span.tag:hover,
+.tag-display span.tag.trigger {
+ color:white;
+ background-color:rgb(0, 85, 85);
+}
+
+#tag-menu a.slash-hover span.var-tag {
+ color:#eee;
+}
+
+.tag-entry.default {
+ color:#ccc;
+}
+
+.brief .nix {
+ margin-top:-1.35em;
+ margin-left:0px;
+ margin-top:-1.15em;
+ text-decoration:none;
+ line-height:1.35em;
+ padding:0 2px;
+ -moz-border-radius:.6em 0 0 .6em;
+ -webkit-border-radius:.6em 0 0 .6em;
+ -o-border-radius:.6em 0 0 .6em;
+ border-radius:.6em 0 0 .6em;
+ color:#fff !important;
+ background:transparent !important;
+}
+
+.brief .nix:hover {
+ background:rgb(153,153,153) !important;
+ background:-moz-linear-gradient(100% 100% 90deg, rgb(102,102,102), rgb(153,153,153) 70%) repeat scroll 0 0 rgb(102,102,102) !important;
+ background-image: -webkit-gradient(linear, 0% 0%, 0% 100%, from(rgb(153,153,153)), to(rgb(102,102,102))) !important;
+}
+
+</style>
+
+<menu id="nix-reasons" style="display:none">
+ <a class="tag">binspam</a><a class="tag">dupe</a><a class="tag">notthebest</a><a class="tag">offtopic</a><a class="tag">slownewsday</a><a class="tag">stale</a><a class="tag">stupid</a>
+</menu>
+<menu id="nod-reasons" style="display:none">
+ <a class="tag">fresh</a><a class="tag">funny</a><a class="tag">insightful</a><a class="tag">interesting</a><a class="tag">maybe</a>
+</menu>
+<menu id="comment-nix-reasons" style="display:none">
+ <a class="tag">offtopic</a><a class="tag">flamebait</a><a class="tag">troll</a><a class="tag">redundant</a><a class="tag">overrated</a>
+</menu>
+<menu id="comment-nod-reasons" style="display:none">
+ <a class="tag">insightful</a><a class="tag">interesting</a><a class="tag">informative</a><a class="tag">funny</a><a class="tag">underrated</a>
+</menu>
+
+<menu id="tag-nod-reasons" style="display:none">
+ <a class="tag">descriptive</a>
+</menu>
+<menu id="feedback-menu" class="tag-menu-admin" type="context">
+ <a class="tag">typo</a><a class="tag">dupe</a><a class="tag">error</a>
+</menu>
+<menu id="tag-menu" class="tag-menu-admin none" type="context">
+
+<!-- <a data-op="!" class="nix">!<span class="var-tag hide"></span></a>-->
+
+</menu>
+
+<script type="text/javascript">
+$(function(){
+var $CURRENT_MENU, $TAG_MENU=$('#tag-menu'), NOTNOT=/^!!/, IE7=/^7\.0/, TAG_PREFIX=/^\/tag\//;
+
+function get_tag_name( $tag ){
+ return ($tag.attr('href') || '').replace(TAG_PREFIX, '') || $tag.text().toLowerCase();
+}
+
+function trigger_menu( e, selector, $menu, menu_content ){
+ var $target=$(original_target(e, selector)), in_use=$target.is('.trigger');
+ if ( $CURRENT_MENU ) {
+ $CURRENT_MENU.menu('cancel', e);
+ $CURRENT_MENU = null;
+ }
+
+ if ( !in_use ) {
+ menu_content && $menu.stop(true, true).hide().html(menu_content);
+ ($CURRENT_MENU=$menu).menu('context', e);
+ }
+ return !in_use;
+}
+
+function open_menu( trigger, $menu ){
+ var $trigger=$(trigger), $fhitem=$trigger.closest('.fhitem');
+ $fhitem.length && user_intent('interest', $fhitem[0]);
+
+ $menu.appendTo(document.body).css({ opacity:0 }).show();
+
+ var right = $fhitem.offset().left + $fhitem.width(),
+ global = $trigger.offset(),
+ local = $menu.offsetParent().offset();
+
+ // Ugly IE position hack required:
+ $.browser.msie && IE7.test($.browser.version) && (local.top = 0);
+
+ // pin the menu (horizontally) on-screen
+ global.left = Math.min(global.left, right-$menu.width());
+
+ $trigger.addClass('trigger');
+ $menu.css({
+ position: 'absolute',
+ top: global.top - local.top + $trigger.height(),
+ left: global.left - local.left,
+ opacity: 1
+ });
+}
+
+function close_menu( trigger, $menu ){
+ $menu.hide();
+ $(trigger).removeClass('trigger');
+ ($CURRENT_MENU===$menu) && ($CURRENT_MENU=false);
+}
+
+/* T2 tag context-menu */
+var $TAG_MENU=$('#tag-menu'), NOTNOT=/^!!/;
+
+
+ var user_is_admin = 0;
+
+
+
+$('a[rel=tag]').live('mousedown',function(ea){
+ window.open(this.href);
+ return false;
+})
+
+$('.tag-bar .disagree').live('mousedown',function(ee){
+ var fhitem = $(original_target(ee)).closest('.fhitem')[0],
+ command = ('!' + $(original_target(ee)).attr("data-tag")).replace(NOTNOT, '');
+ try { Tags.submit(fhitem, command); } catch ( err ) { }
+ return false;
+})
+
+
+
+$('a[rel=tag]').
+ live('mousedown', function( e ){
+
+ return true;
+
+
+ }).
+ live('click', function( e ){
+ if ( !logged_in ) {
+ var target = original_target(e),
+ tag = $(target).text();
+ addfhfilter(tag);
+ }
+ e.preventDefault();
+ return false;
+ });
+
+$TAG_MENU.menu({
+ cssNamespace: 'slash',
+ liveTriggers: true,
+ clickDuration: 300,
+
+ start: function( e, ui ){
+ var $tag = $(ui.trigger),
+ tag = get_tag_name($tag),
+ context = firehose_settings && firehose_settings.viewtitle;
+
+ // Insert the tagname into the menu items where needed.
+ $TAG_MENU.find('span.var-tag').text(tag);
+ $TAG_MENU.find('a.nix').attr('title','not ' + tag);
+
+
+ // non-admins may only delete their own tags
+ $TAG_MENU.find('a:[data-op="-"]').toggle($tag.is('.my'));
+
+
+ // *tagname* in *viewtitle*
+ $TAG_MENU.find('a:[data-op="="]').toggle(!!context);
+ context && $TAG_MENU.find('span.var-view').text(context);
+
+ open_menu($tag, $TAG_MENU);
+ },
+
+ select: function( e, ui ){
+ var $tag = $(ui.trigger),
+ tag = get_tag_name($tag),
+ op = $(ui.select).attr('data-op'),
+ fhitem,
+ command;
+
+ // Global for positioning other things.
+ $related_trigger = $tag;
+
+ switch ( op ) {
+ case '=':
+ addfhfilter(tag);
+ break;
+
+ default:
+ fhitem = $tag.closest('.fhitem')[0];
+ command = (op + tag).replace(NOTNOT, '');
+ try { Tags.submit(fhitem, command); } catch ( err ) { }
+ break;
+ }
+ },
+
+ stop: function( e, ui ){ close_menu(ui.trigger, $TAG_MENU); }
+});
+
+
+
+
+/* T2 feedback context-menu */
+
+
+
+/* T2 datatype context-menu (admin-only) */
+
+
+
+
+
+
+});
+</script>
+
+
+
+<!-- SMACKS: BEGIN STORY CONTENT -->
+<div class="container">
+ <!--SMACKS: BEGING CENTER COLUMN -->
+ <div class="main-wrap has-rail-right">
+ <div class="main-content">
+ <div class="grid_24 a2 ">
+ </div>
+ <div id="firehose" class="nothumbs">
+ <div id="firehoselist" class="fhroot fleft grid_24">
+ <div id="announcement">
+ <div id="announcementText" style="display: none;"> <span class="headline">Migrate from GitHub to SourceForge quickly and easily with <strong><a href="https://sourceforge.net/p/forge/documentation/GitHub%20Importer/">this tool</a></strong>.</span> Check out all of SourceForge’s <strong><a href="https://sourceforge.net/blog/brief-history-sourceforge-look-to-future/">recent improvements.</a></strong></div>
+ <a href="" class="btn-close" title="don't show me this again" onclick="closeAnnouncement(); return false;">×</a>
+</div>
+
+
+<script type="text/javascript">
+
+if (!$.cookie('hide_sitenotice_36')) {
+ $('#announcement').fadeIn(300);
+}
+
+function closeAnnouncement() {
+ $('#announcement').fadeOut(300);
+ $.cookie('hide_sitenotice_36', 'true', { path: '/', domain: 'slashdot.org', expires: 1 });
+}
+</script>
+ <article id="firehose-102639752" data-fhid="102639752" data-fhtype="story" class="fhitem fhitem-story article usermode thumbs grid_24">
+ <span class="sd-info-block" style="display: none">
+ <span class="sd-key-firehose-id">102639752</span>
+ <span class="type">story</span>
+
+ </span>
+
+
+
+
+
+
+
+
+
+
+<header>
+
+ <span class="topic" id="topic-102639752">
+ <a href="//tech.slashdot.org/index2.pl?fhfilter=security" onclick="return addfhfilter('security');">
+
+ <img src="//a.fsdn.com/sd/topics/security_64.png" width="64" height="64" alt="Security" title="Security">
+
+ </a>
+
+
+
+
+
+
+
+
+ <a href="//tech.slashdot.org/index2.pl?fhfilter=internet" onclick="return addfhfilter('internet');">
+
+ <img src="//a.fsdn.com/sd/topics/internet_64.png" width="64" height="64" alt="The Internet" title="The Internet">
+
+ </a>
+
+
+
+
+
+
+ <a href="//tech.slashdot.org/index2.pl?fhfilter=it" onclick="return addfhfilter('it');">
+
+ <img src="//a.fsdn.com/sd/topics/it_64.png" width="64" height="64" alt="IT" title="IT">
+
+ </a>
+
+
+
+
+
+
+ <a href="//tech.slashdot.org/index2.pl?fhfilter=technology" onclick="return addfhfilter('technology');">
+
+ <img src="//a.fsdn.com/sd/topics/technology_64.png" width="64" height="64" alt="Technology" title="Technology">
+
+ </a>
+ </span>
+
+
+ <h2 class="story">
+
+
+
+
+
+
+
+
+
+
+
+
+
+ <span id="title-102639752" class="story-title"> <a href="//tech.slashdot.org/story/18/09/06/1954253/400000-websites-vulnerable-through-exposed-git-directories">400,000 Websites Vulnerable Through Exposed<nobr> <wbr></nobr>.git Directories</a> <span class=" no extlnk"><a class="story-sourcelnk" href="https://www.scmagazine.com/home/news/400000-websites-vulnerable-through-exposed-git-directories/" title="External link - https://www.scmagazine.com/home/news/400000-websites-vulnerable-through-exposed-git-directories/" target="_blank"> (scmagazine.com) </a></span></span>
+
+
+
+ <!--<span class="comments commentcnt-102639752" >32</span>-->
+
+
+
+ <!-- comment bubble -->
+
+ <span class="comment-bubble"><a href="//tech.slashdot.org/story/18/09/06/1954253/400000-websites-vulnerable-through-exposed-git-directories#comments" title="">32</a></span>
+
+ </h2>
+ <div class="details" id="details-102639752">
+ <span class="story-details">
+ <span class="story-views">
+ <span class="sodify" onclick="firehose_set_options('color', 'red')" title="Filter Firehose to entries rated red or better"></span><span class="icon-beaker pop1 " alt="Popularity" title="Filter Firehose to entries rated red or better" onclick="firehose_set_options('color', 'red')"><span></span></span>
+ </span>
+ </span>
+ <span class="story-byline">
+
+
+ Posted
+ by
+
+
+
+ msmash
+
+
+
+
+
+
+ <time id="fhtime-102639752" datetime="on Thursday September 06, 2018 @04:00PM">on Thursday September 06, 2018 @04:00PM</time>
+
+
+ from the <span class="dept-text">security-woes</span> dept.
+
+ </span>
+ </div>
+</header>
+
+<div class="body" id="fhbody-102639752">
+
+
+
+
+
+
+ <div id="text-102639752" class="p">
+
+
+ Open .git directories are a bigger cybersecurity problem than many might imagine, at least according to a Czech security researcher who <a href="https://www.scmagazine.com/home/news/400000-websites-vulnerable-through-exposed-git-directories/">discovered almost 400,000 web pages with an open .git directory</a> possibly exposing a wide variety of data. From a report:<i> Vladimir Smitka began his .git directory odyssey in July when he began looking at Czech websites to find how many were improperly configured and allow access to their .git folders within the file versions repository. Open .git directories are a particularly dangerous issue, he said, because they can contain a great deal of sensitive information. "Information about the website's structure, and sometimes you can get very sensitive data such as database passwords, API keys, development IDE settings, and so on. However, this data shouldn't be stored in the repository, but in previous scans of various security issues, I have found many developers that do not follow these best practices," Smitka wrote. Smitka queried 230 million websites to discover the 390,000 allowing access to their .git directories. The vast majority of the websites with open directories had a .com TLD with .net, .de, .org and uk comprising most of the others.</i><br>
+
+ </div>
+
+
+
+
+
+
+
+
+ </div>
+ <aside class="grid_24 view_mode">
+
+ <div class="units-12 story-detail-tags">
+ <span id="sharethis-102639752" class="">
+
+
+
+
+
+
+ <div class="story-controls">
+ <div
+ class="janrainSocialPlaceholder"
+ data-janrain-url="https://tech.slashdot.org/story/18/09/06/1954253/400000-websites-vulnerable-through-exposed-git-directories"
+ data-janrain-title="400,000 Websites Vulnerable Through Exposed .git Directories"
+ data-janrain-message="400,000 Websites Vulnerable Through Exposed .git Directories @slashdot"
+ ></div>
+ </div>
+
+
+ </span>
+
+ <div class="story-tags">
+ <div class="tright tw">
+
+ <span class="tright tags">
+
+ <menu type="toolbar" class="edit-bar">
+ <span id="tagbar-102639752" class="tag-bar none">
+ <a class="topic tag" rel="statictag" href="//slashdot.org/tag/" target="_blank"></a>
+<a class="popular tag" rel="statictag" href="//slashdot.org/tag/git" target="_blank">git</a>
+<a class="popular tag" rel="statictag" href="//slashdot.org/tag/internet" target="_blank">internet</a>
+<a class="popular tag" rel="statictag" href="//slashdot.org/tag/it" target="_blank">it</a>
+
+ </span>
+
+ <a class="edit-toggle" href="/my/login/" onclick="show_login_box();return false;">
+ <span class="icon-tag btn collapse"></span>
+ </a>
+
+
+ <div class="tag-menu">
+ <input class="tag-entry default" type="text" value="apply tags">
+ </div>
+
+
+
+
+
+ </menu>
+
+ </span>
+
+ </div>
+ </div>
+ </div>
+
+
+
+
+
+
+ <section class="grid_24" id="newa2footerv2">
+ <div class="grid_6 pr">
+ <h3><a title="Previous story" href="//games.slashdot.org/story/18/09/06/1921222/eve-online-studio-acquired-by-korean-mmo-maker?sdsrc=prev">←</a></h3>
+ </div>
+ <div class="grid_12 rl">
+ <h3>You may like to read:</h3>
+ </div>
+ <div class="grid_6 ns">
+ <h3><a title="Next story" href="//tech.slashdot.org/story/18/09/06/205221/ive-seen-the-future-of-consumer-ai-and-it-doesnt-have-one?sdsrc=next">→</a></h3>
+ </div>
+ <div class="grid_6">
+ <span class="c">
+ <a href="//games.slashdot.org/story/18/09/06/1921222/eve-online-studio-acquired-by-korean-mmo-maker?sdsrc=prev">'Eve Online' Studio Acquired By Korean MMO Maker </a>
+ </span>
+ </div>
+ <div class="grid_12">
+ <span class="c">
+
+
+
+
+
+
+ <h2><a href="//tech.slashdot.org/story/18/01/08/1954203/james-damore-sues-google-for-allegedly-discriminating-against-conservative-white-men?sdsrc=popbyskid">James Damore Sues Google For Allegedly Discriminating Against Conservative White Men</a><br></h2>
+ <h2><a href="//tech.slashdot.org/story/18/03/19/1736231/self-driving-uber-car-kills-arizona-woman-in-first-fatal-crash-involving-pedestrian?sdsrc=popbyskid">Self-Driving Uber Car Kills Arizona Woman in First Fatal Crash Involving Pedestrian</a><br></h2>
+ <h2><a href="//tech.slashdot.org/story/17/11/16/0050243/twitter-bans-removes-verified-status-of-white-supremacists?sdsrc=popbyskid">Twitter Bans, Removes Verified Status of White Supremacists</a><br></h2>
+ <h2><a href="//tech.slashdot.org/story/18/02/15/2255242/pro-gun-russian-bots-flood-twitter-after-parkland-shooting?sdsrc=popbyskid">Pro-Gun Russian Bots Flood Twitter After Parkland Shooting</a><br></h2>
+ <h2><a href="//tech.slashdot.org/story/17/11/19/043243/i-see-things-differently-james-damore-on-his-autism-and-the-google-memo?sdsrc=popbyskid">'I See Things Differently': James Damore on his Autism and the Google Memo</a><br></h2>
+
+
+
+ </span>
+ </div>
+ <div class="grid_6">
+ <span class="c">
+
+ <a href="//tech.slashdot.org/story/18/09/06/205221/ive-seen-the-future-of-consumer-ai-and-it-doesnt-have-one?sdsrc=next">'I've Seen the Future of Consumer AI, and it Doesn't Have One'</a>
+
+ </span>
+ </div>
+ </section>
+
+
+
+ </aside>
+
+
+
+
+ </article>
+ </div>
+ </div>
+ </div>
+ </div>
+ <!-- SMACKS: BEGIN RIGHT RAIL -->
+ <aside id="slashboxes" class="rail-right">
+
+ <div id="slashboxesin" class="yui-b">
+
+
+
+ </div>
+ <div class="railad adwrap-unviewed">
+<div id='div-gpt-ad-300x250_a'><script type='text/javascript'>
+googletag.cmd.push(function(){
+googletag.display('div-gpt-ad-300x250_a');});</script></div>
+</div>
+ <div id="taboola-below-article-thumbnails"></div>
+<script type="text/javascript">
+ if ( isAdBlockActive) {
+ window._taboola = window._taboola || [];
+ _taboola.push({
+ mode: 'thumbnails-rr2',
+ container: 'taboola-below-article-thumbnails',
+ placement: 'Below Article Thumbnails',
+ target_type: 'mix'
+ });
+ };
+</script>
+
+ </aside>
+ <!-- SMACKS: END RIGHT RAIL -->
+</div>
+<!-- END STORY CONTENT -->
+
+<!-- THIS IS THE LOCATION FOR THE NEW STORY_B CODE -->
+<div class="adwrap">
+<div id='div-gpt-ad-728x90_b'><script type='text/javascript'>
+googletag.cmd.push(function(){
+googletag.display('div-gpt-ad-728x90_b');});</script></div>
+</div>
+<div id="stackcommerce-adwrap" style="display:none;">
+ <div style="margin:auto;max-width:970px;max-height:250px;">
+ <div data-sc-widget data-publisher-id="66" data-categories="88,90" data-items-per-page="4" data-col-count="4" data-utm-source="slashdot.org" data-utm-content="story-deal-feed"></div>
+ </div>
+</div>
+<script type="text/javascript">
+if (!window.is_euro_union) {
+ if (isAdBlockActive) {
+ $.ajax({
+ url: '/ajax.pl?op=nel',
+ success: function(html){
+ if(html){
+ $('#firehoselist article').eq(0).after(html);
+ } else {
+ (function () {
+ var stackCommerceDiv = document.getElementById('stackcommerce-adwrap');
+ stackCommerceDiv.style = '';
+ var stackCommerce = document.createElement('script');
+ stackCommerce.async = true;
+ stackCommerce.type = 'text/javascript';
+ stackCommerce.src = 'https://widgets.stackcommerce.com/js-deal-feed/0.1/widget.js';
+ var node = document.getElementsByTagName('script')[0];
+ node.parentNode.insertBefore(stackCommerce, node);
+ })();
+ }
+ }
+ });
+ };
+}
+</script>
+<!--------------------------->
+
+
+<!-- SMACKS: BEGIN COMMENTS CONTAINER -->
+<div class="container">
+ <!-- SMACKS: BEGIN COMMENTS SECTION -->
+ <div class="main-wrap">
+ <div class="main-content">
+ <div id="comments" class="a2commentwrap">
+ <div>
+ <a name="comments"></a>
+<div id="comments" class="container">
+ <div class="main-wrap">
+ <div class="main-content">
+ <section class="d2incommentspl">
+ <div class="commentwrap" id="commentwrap">
+
+ <div class="commentBox">
+ <div class="title hide">
+ <h4>
+
+ <span class="escape-link"><a href="//tech.slashdot.org/story/18/09/06/1954253/400000-websites-vulnerable-through-exposed-git-directories" title="Back to Article - 400,000 Websites Vulnerable Through Exposed<nobr> <wbr></nobr>.git Directories">400,000 Websites Vulnerable Through Exposed<nobr> <wbr></nobr>.git Directories</a></span>
+
+ <span class="commentBoxLinks"><a href="#" onclick="D2.ajaxFetchComments(0,1); return false"><span id="more_comments_num_d"></span> More</a>
+
+
+
+ | <span class="ind"></span><a href="//tech.slashdot.org/comments.pl?sid=12580412&op=reply&threshold=1&commentsort=0&mode=thread&pid=" onclick="D2.replyTo(0); return false;">Reply</a>
+
+
+ <a class="login" href="//tech.slashdot.org/login.pl" onclick="show_login_box(); return false">Login</a></span>
+ </h4>
+ </div>
+ </div>
+
+
+ <section class="grid_24" id="d2header"><div>
+
+ <h2 class="commentspl test"><a title="Back to Article - 400,000 Websites Vulnerable Through Exposed<nobr> <wbr></nobr>.git Directories" href="//tech.slashdot.org/story/18/09/06/1954253/400000-websites-vulnerable-through-exposed-git-directories">400,000 Websites Vulnerable Through Exposed<nobr> <wbr></nobr>.git Directories</a></h2>
+
+ <nav class="grid_24">
+ <div class="grid_14 widthauto">
+
+ <span class="ind"></span><a class="btn first" href="//tech.slashdot.org/comments.pl?sid=12580412&op=reply&threshold=1&commentsort=0&mode=thread&pid=" onclick="D2.replyTo(0); return false;">Post</a>
+
+ <!-- <a href="//tech.slashdot.org/search.pl?op=comments&sid=12580412" class="btn">Search <span class="totalcommentcnt">32</span> Comments</a> -->
+
+
+ <a href="#" onclick="D2.ajaxFetchComments(0,1,'','',-1); return false" class="btn" id="d2loadall">Load All Comments</a>
+
+
+
+ </div>
+ <div class="grid_10 d1or2">
+
+
+
+ <div id="d2out" class="horizontal rooted grid_15">
+ <div id="d2act" class="hide">
+ <div class="loki" id="gods">
+ <script type="text/javascript">
+ $(function(){
+ D2.slider = new D2.Slider(
+ D2.user_threshold(),
+ D2.user_highlightthresh(),
+ 'x'
+ );
+ });
+ </script>
+ <div id="bones" class="grid_12">
+ <div class="ccw-count-container grid_24">
+ <span id="ccw-full-count-text" class="grid_8 ccw-count-text tcenter"><span></span><span id="ccw-full-phrase"> Full</span></span>
+ <span id="ccw-abbr-count-text" class="grid_8 ccw-count-text"><span></span><span id="ccw-abbr-phrase"> Abbreviated</span></span>
+ <span id="ccw-hide-count-text" class="grid_8 ccw-count-text tleft"><span></span><span id="ccw-hide-phrase"> Hidden</span></span>
+ </div>
+ <div id="ccw">
+ <div id="ccw-body" class="ccw-core">
+ <div id="ccw-panel-container" class="ccw-core">
+ <div id="ccw-full-panel" class="ccw-panel">
+ /Sea<div class="ccw-panel-border"></div>
+ <div id="ccw-full-count-pos" class="ccw-core-pos ccw-count-pos"></div>
+ </div>
+ <div id="ccw-abbr-panel" class="ccw-panel">
+ <div class="ccw-panel-border"></div>
+ <div id="ccw-abbr-count-pos" class="ccw-core-pos ccw-count-pos"></div>
+ </div>
+ <div id="ccw-hide-panel" class="ccw-panel">
+ <div id="ccw-hide-count-pos" class="ccw-core-pos ccw-count-pos"></div>
+ </div>
+ </div>
+ <div id="ccw-control" class="ccw-core">
+ <div id="ccw-centering-rail" class="ccw-core">
+ <div id="ccw-hide-bar-pos" class="ccw-core-pos">
+ <div id="ccw-hide-bar" class="ccw-bar">
+ <div id="ccw-hide-bar-tab" class="ccw-bar-tab"></div>
+ <div class="ccwa"></div>
+ <div class="ccwb"></div>
+ <div id="ccw-hide-bar-upzone" class="ccw-upzone" onclick="D2.slider.stepTHT(HIDE_BAR, +1)"></div>
+ <div id="ccw-hide-bar-downzone" class="ccw-downzone" onclick="D2.slider.stepTHT(HIDE_BAR, -1)"></div>
+ </div>
+ </div>
+ <div id="ccw-abbr-bar-pos" class="ccw-core-pos">
+ <div id="ccw-abbr-bar" class="ccw-bar">
+ <div id="ccw-abbr-bar-tab" class="ccw-bar-tab"></div>
+ <div class="ccwa"></div>
+ <div class="ccwb"></div>
+ <div id="ccw-abbr-bar-upzone" class="ccw-upzone" onclick="D2.slider.stepTHT(ABBR_BAR, +1)"></div>
+ <div id="ccw-abbr-bar-downzone" class="ccw-downzone" onclick="D2.slider.stepTHT(ABBR_BAR, -1)"></div>
+ </div>
+ </div>
+ </div>
+ </div>
+ </div>
+ <div class="ccw-score-label grid_24">
+ <div class="grid_3"><span class="sc">Score:</span></div>
+ <div class="grid_3">5<span class="lg"></span></div>
+ <div class="grid_3">4<span class="lg"></span></div>
+ <div class="grid_3">3<span class="lg"></span></div>
+ <div class="grid_3">2<span class="lg"></span></div>
+ <div class="grid_3">1<span class="lg"></span></div>
+ <div class="grid_3">0<span class="lg"></span></div>
+ <div class="grid_3">-1<span class="lg"></span></div>
+ </div>
+ </div>
+ </div>
+ <div class="commentControlFooter">
+ <a href="#" onclick="D2.ajaxFetchComments(0,1); return false"><span id="more_comments_num_c"></span> More</a>
+
+
+
+ | <span class="ind"></span><a href="//tech.slashdot.org/comments.pl?sid=12580412&op=reply&threshold=1&commentsort=0&mode=thread&pid=" onclick="D2.replyTo(0); return false;">Reply</a>
+
+
+ <a class="login" href="//tech.slashdot.org/login.pl" onclick="show_login_box(); return false">Login</a><div id="login_cover" class="hide" onclick="hide_login_box()"></div>
+<div id="login_box" class="hide">
+ <div id="login_box_content">
+ <div id='embbeded_login_modal' class="hide">
+<form action="https://slashdot.org/my/login" method="post" onsubmit="if (global_returnto) { this.returnto.value = global_returnto }" class="embedded"><fieldset style="-webkit-border-radius:10px 10px 0 0;border-radius:10px 10px 0 0;-moz-border-radius:10px 10px 0 0">
+<div style='height:25px;'> </div>
+ <input type="hidden" name="returnto" value="//tech.slashdot.org/comments.pl?sid=12580412">
+ <input type="hidden" name="op" value="userlogin">
+ <p>
+ <label class="fleft" for="unickname">Nickname:</label>
+ <input type="text" name="unickname" value="">
+ </p>
+ <p>
+ <label class="fleft" for="upasswd">Password:</label>
+ <input type="password" name="upasswd" placeholder="6-1024 characters long">
+ </p>
+ <label class="checkbox"><input type="checkbox" name="login_temp" value="yes"> Public Terminal</label>
+ <br>
+ <hr>
+ <input type="submit" name="userlogin" value="Log In" class="fno"> <a href="//slashdot.org/my/mailpassword" class="btn link" onclick="getModalPrefs('sendPasswdModal', 'Retrieve Password', 1); return false;">Forgot your password?</a>
+</fieldset></form>
+
+<div id="janrainEngageEmbed"></div>
+<div class="actions">
+ <a class="ico close" onclick="hide_login_slider();" href=""><span>Close</span></a>
+</div>
+</div>
+ <div class="actions">
+ <a class="ico close" href="#" onclick="hide_login_box(); return false"><span>Close</span></a>
+ </div>
+ </div>
+</div>
+<script type="text/javascript">logged_in = 0</script>
+ </div>
+ <div id="commentControlBoxStatus" class="hide"></div>
+ </div>
+ </div>
+ </div>
+
+
+ <a href="//tech.slashdot.org/search.pl?op=comments&sid=12580412" class="ui-icon search_comments">Search <span class="totalcommentcnt">32</span> Comments</a>
+
+ <a class="pref ui-icon-w" href="//tech.slashdot.org/users.pl" onclick="show_login_box(); $('#modal_box').addClass('login'); return false;">Log In/Create an Account</a>
+
+ </div>
+ </nav>
+ <section id="besttabs" class="grid_24">
+ <span class="legend">Comments Filter:</span>
+ <ul class="besttabslist">
+ <li class="active">
+ <a href="#" data-filter-url="//tech.slashdot.org/story/18/09/06/1954253/400000-websites-vulnerable-through-exposed-git-directories#comments">All</a>
+ </li>
+
+ <li >
+ <a href="" data-filter-url="//tech.slashdot.org/story/18/09/06/1954253/400000-websites-vulnerable-through-exposed-git-directories/insightful-comments#comments">Insightful</a>
+ </li>
+
+ <li >
+ <a href="" data-filter-url="//tech.slashdot.org/story/18/09/06/1954253/400000-websites-vulnerable-through-exposed-git-directories/informative-comments#comments">Informative</a>
+ </li>
+
+ <li >
+ <a href="" data-filter-url="//tech.slashdot.org/story/18/09/06/1954253/400000-websites-vulnerable-through-exposed-git-directories/interesting-comments#comments">Interesting</a>
+ </li>
+
+ <li >
+ <a href="" data-filter-url="//tech.slashdot.org/story/18/09/06/1954253/400000-websites-vulnerable-through-exposed-git-directories/funny-comments#comments">Funny</a>
+ </li>
+
+ </ul>
+ <script>
+ (function($){
+ $('#besttabs').show();
+ $('.besttabslist').on('click', 'li a', function(e){
+ e.preventDefault();
+ var url = $(this).data('filter-url');
+ //console.log('URL= ', url);
+ $(this)
+ .closest('ul').find('li').removeClass('active')
+ .end()
+ .closest('li').addClass('active');
+ window.location = url;
+ });
+ })($j);
+ </script>
+ </section>
+ <aside class="grid_24">
+ <p>
+ <small><strong>The Fine Print:</strong> The following comments are owned by whoever posted them. We are not responsible for them in any way.</small>
+ </p>
+ </aside>
+ </section>
+
+ </div>
+ </div>
+</div><script src="//a.fsdn.com/sd/comments-minified.js?8f5016a67a2f2048" type="text/javascript"></script>
+
+
+<script type="text/javascript">
+<!--
+D2.d2_keybindings_disable()[191] = 1;
+D2.boxStatus(1);
+D2.comments({ 57265748: { uid: 666, pid: 0, read: 0, points: 0, kids: [ 57265928 ], opid: 0 }, 57266046: { uid: 666, pid: 57265968, subject: "Re:Alternate headline: 99.8% websites are OK", read: 0, points: 0, kids: [ ], opid: 57265968 }, 57265838: { uid: 666, pid: 0, read: 0, points: 0, kids: [ ], opid: 0 }, 57265702: { uid: 1516577, pid: 57265676, subject: "Re:.htaccess", read: 0, points: 2, kids: [ ], opid: 57265676 }, 57265754: { uid: 265505, pid: 0, read: 0, points: 1, kids: [ 57265854, 57265868 ], opid: 0 }, 57265826: { uid: 666, pid: 0, read: 0, points: 0, kids: [ 57265832 ], opid: 0 }, 57266128: { uid: 124937, pid: 57266028, subject: "Re:So?", read: 0, points: 2, kids: [ 57267568 ], opid: 57266028 }, 57266652: { uid: 898571, pid: 57266554, subject: "Re:So?", read: 0, points: 1, kids: [ ], opid: 57266554 }, 57265760: { uid: 666, pid: 0, read: 0, points: -1, kids: [ ], opid: 0 }, 57267314: { uid: 197329, pid: 57265676, subject: "Re:.htaccess", read: 0, points: 2, kids: [ ], opid: 57265676 }, 57265776: { uid: 666, pid: 0, read: 0, points: 0, kids: [ ], opid: 0 }, 57265832: { uid: 2813011, pid: 57265826, read: 0, points: 2, kids: [ ], opid: 57265826 }, 57266024: { uid: 666, pid: 0, read: 0, points: 0, kids: [ 57266638 ], opid: 0 }, 57265706: { uid: 666, pid: 57265676, read: 0, points: 0, kids: [ 57265724 ], opid: 57265676 }, 57267330: { uid: 197329, pid: 57265868, subject: "Re:Your central git repo ...", read: 0, points: 2, kids: [ ], opid: 57265868 }, 57266650: { uid: 467024, pid: 57266028, subject: "Re:So?", read: 0, points: 2, kids: [ ], opid: 57266028 }, 57266750: { uid: 5486298, pid: 0, read: 0, points: 0, kids: [ ], opid: 0 }, 57266638: { uid: 260285, pid: 57266024, read: 0, points: 2, kids: [ ], opid: 57266024 }, 57266180: { uid: 666, pid: 0, read: 0, points: 0, kids: [ ], opid: 0 }, 57265724: { uid: 666, pid: 57265706, read: 0, points: 0, kids: [ 57265824 ], opid: 57265706 }, 57266028: { uid: 673578, pid: 0, read: 0, points: 2, kids: [ 57266128, 57266554, 57266650 ], opid: 0 }, 57267598: { uid: 182339, pid: 57265676, read: 0, points: 3, kids: [ ], opid: 57265676 }, 57265824: { uid: 666, pid: 57265724, read: 0, points: 0, kids: [ ], opid: 57265724 }, 57265676: { uid: 666, pid: 0, read: 0, points: 0, kids: [ 57265702, 57265706, 57267314, 57267598 ], opid: 0 }, 57265854: { uid: 666, pid: 57265754, subject: "Re:Your central git repo ...", read: 0, points: 0, kids: [ ], opid: 57265754 }, 57265928: { uid: 1122017, pid: 57265748, subject: "Re:https://slashdot.org/.git", read: 0, points: 4, kids: [ ], opid: 57265748 }, 57267568: { uid: 666, pid: 57266128, subject: "Re:So?", read: 0, points: 0, kids: [ ], opid: 57266128 }, 57266554: { uid: 666, pid: 57266028, subject: "Re:So?", read: 0, points: 1, kids: [ 57266652 ], opid: 57266028 }, 57265820: { uid: 2813011, pid: 0, read: 0, points: 3, kids: [ ], opid: 0 }, 57265868: { uid: 30335, pid: 57265754, subject: "Re:Your central git repo ...", read: 0, points: 4, kids: [ 57267330 ], opid: 57265754 }, 57265968: { uid: 148257, pid: 0, read: 0, points: 2, kids: [ 57266046 ], opid: 0 }, 57266440: { uid: 666, pid: 0, read: 0, points: 0, kids: [ ], opid: 0 } });
+
+D2.thresh_totals({6:{6:{1:32,3:0,2:0}},3:{6:{1:28,3:0,2:4},4:{1:28,3:3,2:1},3:{1:28,3:4,2:0},5:{1:28,3:0,2:4}},2:{6:{1:19,3:0,2:13},4:{1:19,3:3,2:10},3:{1:19,3:6,2:7},2:{1:19,3:13,2:0},5:{1:19,3:0,2:13}},1:{6:{1:16,3:0,2:16},4:{1:16,3:3,2:13},1:{1:16,3:16,2:0},3:{1:16,3:6,2:10},2:{1:16,3:14,2:2},5:{1:16,3:0,2:16}},4:{6:{1:30,3:0,2:2},4:{1:30,3:2,2:0},5:{1:30,3:0,2:2}},0:{6:{1:1,3:0,2:31},4:{1:1,3:3,2:28},1:{1:1,3:25,2:6},3:{1:1,3:6,2:25},0:{1:1,3:31,2:0},2:{1:1,3:14,2:17},5:{1:1,3:0,2:31}},"-1":{6:{1:0,3:0,2:32},3:{1:0,3:6,2:26},2:{1:0,3:14,2:18},1:{1:0,3:25,2:7},4:{1:0,3:3,2:29},0:{1:0,3:32,2:0},"-1":{1:0,3:32,2:0},5:{1:0,3:0,2:32}},5:{6:{1:32,3:0,2:0},5:{1:32,3:0,2:0}}});
+
+D2.root_comment(0);
+D2.root_comments([57265676,57265748,57265754,57265760,57265776,57265820,57265826,57265838,57265968,57266024,57266028,57266180,57266440,57266750]);
+D2.root_comments_hash({57265748:1,57265838:1,57265826:1,57265754:1,57265760:1,57265776:1,57266024:1,57266750:1,57266180:1,57266028:1,57265676:1,57265820:1,57265968:1,57266440:1});
+
+D2.d2_comment_order(0);
+D2.user_uid(666);
+D2.user_is_anon(1);
+D2.user_is_admin(0);
+D2.user_is_subscriber(0);
+D2.user_smallscreen(0);
+D2.user_threshold(1);
+D2.user_highlightthresh(4);
+D2.user_d2asp(0);
+
+D2.discussion_id(12580412);
+
+D2.d2_seen('57265676,26,4,18,24,6,6,16,44,4,2,6,6,16,14,60,40,56,4,18,82,52,260,114,84,12,2,98,564,16,238,30');
+D2.more_comments_num(0);
+
+
+//-->
+</script>
+
+
+
+
+
+
+
+
+ <ul id="commentlisting" class="d2">
+ <li id="tree_57265676" class="comment hidden"><span class="ind"></span>
+<div id="comment_status_57265676" class="commentstatus"></div>
+<div id="comment_57265676" class="cw">
+</div>
+
+<div id="replyto_57265676"></div>
+
+<ul id="group_57265676">
+ <li id="hiddens_57265676" class="hide"></li>
+</ul>
+
+<ul id="commtree_57265676"><li id="tree_57265702" class="comment oneline"><span class="ind"></span>
+<div id="comment_status_57265702" class="commentstatus"></div>
+<div id="comment_57265702" class="cw">
+ <div id="comment_top_57265702" class="commentTop newcomment">
+ <div class="title">
+ <h4><a id="comment_link_57265702" name="comment_link_57265702" href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57265702" onclick="return D2.setFocusComment(57265702)" >Re:</a>
+
+
+ <span id="comment_score_57265702" class="score"> (<a href="#" onclick="getModalPrefs('modcommentlog', 'Moderation Comment Log', 57265702); return false"><span class=opt>Score:</span>2</a>, Informative)</span></h4>
+ </div>
+ <div class="details">
+ <span class="by"><span class="byby">by </span><a href="//slashdot.org/~MidSpeck">MidSpeck</a> <span class="uid"><a href="//slashdot.org/~MidSpeck">( 1516577 )</a></span></a></span><span class="writes" style="display:none"> writes:</span>
+ <span class="otherdetails" id="comment_otherdetails_57265702"></span>
+ </div>
+ </div>
+ <div class="commentBody">
+ <div id="comment_body_57265702"><p>^/.*/\.git/<br>Protect git repositories in all subdirectories as well.</p></div>
+ </div>
+
+ <div class="commentSub" id="comment_sub_57265702">
+
+</div>
+</div>
+
+<div id="replyto_57265702"></div>
+
+<ul id="group_57265702">
+ <li id="hiddens_57265702" class="hide"></li>
+</ul>
+
+</li><li id="tree_57265706" class="comment hidden"><span class="ind"></span>
+<div id="comment_status_57265706" class="commentstatus"></div>
+<div id="comment_57265706" class="cw">
+</div>
+
+<div id="replyto_57265706"></div>
+
+<ul id="group_57265706">
+ <li id="hiddens_57265706" class="hide"></li>
+</ul>
+
+<ul id="commtree_57265706"><li id="tree_57265724" class="comment hidden"><span class="ind"></span>
+<div id="comment_status_57265724" class="commentstatus"></div>
+<div id="comment_57265724" class="cw">
+</div>
+
+<div id="replyto_57265724"></div>
+
+<ul id="group_57265724">
+ <li id="hiddens_57265724" class="hide"></li>
+</ul>
+
+<ul id="commtree_57265724"><li id="tree_57265824" class="comment hidden"><span class="ind"></span>
+<div id="comment_status_57265824" class="commentstatus"></div>
+<div id="comment_57265824" class="cw">
+</div>
+
+<div id="replyto_57265824"></div>
+
+<ul id="group_57265824">
+ <li id="hiddens_57265824" class="hide"></li>
+</ul>
+
+</li><li id="hidestring_57265724"><noscript><b class='more'><span class="ind"></span><a href="//tech.slashdot.org/comments.pl?sid=12580412&threshold=-1&commentsort=0&mode=thread&pid=57265724">1 reply</a> beneath your current threshold.</b></noscript></li></ul></li><li id="hidestring_57265706"><noscript><b class='more'><span class="ind"></span><a href="//tech.slashdot.org/comments.pl?sid=12580412&threshold=-1&commentsort=0&mode=thread&pid=57265706">1 reply</a> beneath your current threshold.</b></noscript></li></ul></li><li id="tree_57267314" class="comment oneline"><span class="ind"></span>
+<div id="comment_status_57267314" class="commentstatus"></div>
+<div id="comment_57267314" class="cw">
+ <div id="comment_top_57267314" class="commentTop newcomment">
+ <div class="title">
+ <h4><a id="comment_link_57267314" name="comment_link_57267314" href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57267314" onclick="return D2.setFocusComment(57267314)" >Re:</a>
+
+
+ <span id="comment_score_57267314" class="score"> (<a href="#" onclick="getModalPrefs('modcommentlog', 'Moderation Comment Log', 57267314); return false"><span class=opt>Score:</span>2</a>)</span></h4>
+ </div>
+ <div class="details">
+ <span class="by"><span class="byby">by </span><a href="//slashdot.org/~jrumney">jrumney</a> <span class="uid"><a href="//slashdot.org/~jrumney">( 197329 )</a></span></a></span><span class="writes" style="display:none"> writes:</span>
+ <span class="otherdetails" id="comment_otherdetails_57267314"></span>
+ </div>
+ </div>
+ <div class="commentBody">
+ <div id="comment_body_57267314">Why stop there? Are there any dot files/directories that need to be served over HTTP?</div>
+ </div>
+
+ <div class="commentSub" id="comment_sub_57267314">
+
+</div>
+</div>
+
+<div id="replyto_57267314"></div>
+
+<ul id="group_57267314">
+ <li id="hiddens_57267314" class="hide"></li>
+</ul>
+
+</li><li id="tree_57267598" class="comment oneline"><span class="ind"></span>
+<div id="comment_status_57267598" class="commentstatus"></div>
+<div id="comment_57267598" class="cw">
+ <div id="comment_top_57267598" class="commentTop newcomment">
+ <div class="title">
+ <h4><a id="comment_link_57267598" name="comment_link_57267598" href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57267598" onclick="return D2.setFocusComment(57267598)" >Re: .htaccess</a>
+
+
+ <span id="comment_score_57267598" class="score"> (<a href="#" onclick="getModalPrefs('modcommentlog', 'Moderation Comment Log', 57267598); return false"><span class=opt>Score:</span>3</a>)</span></h4>
+ </div>
+ <div class="details">
+ <span class="by"><span class="byby">by </span><a href="//slashdot.org/~spongman">spongman</a> <span class="uid"><a href="//slashdot.org/~spongman">( 182339 )</a></span></a></span><span class="writes" style="display:none"> writes:</span>
+ <span class="otherdetails" id="comment_otherdetails_57267598"></span>
+ </div>
+ </div>
+ <div class="commentBody">
+ <div id="comment_body_57267598"><p>Why doesn't Apache block all '.'-prefixed directories by default?</p></div>
+ </div>
+
+ <div class="commentSub" id="comment_sub_57267598">
+
+</div>
+</div>
+
+<div id="replyto_57267598"></div>
+
+<ul id="group_57267598">
+ <li id="hiddens_57267598" class="hide"></li>
+</ul>
+
+</li><li id="hidestring_57265676"><noscript><b class='more'><span class="ind"></span><a href="//tech.slashdot.org/comments.pl?sid=12580412&threshold=-1&commentsort=0&mode=thread&pid=57265676">1 reply</a> beneath your current threshold.</b></noscript></li></ul></li><li id="tree_57265748" class="comment hidden"><span class="ind"></span>
+<div id="comment_status_57265748" class="commentstatus"></div>
+<div id="comment_57265748" class="cw">
+</div>
+
+<div id="replyto_57265748"></div>
+
+<ul id="group_57265748">
+ <li id="hiddens_57265748" class="hide"></li>
+</ul>
+
+<ul id="commtree_57265748"><li id="tree_57265928" class="comment full contain"><span class="ind"></span>
+<div id="comment_status_57265928" class="commentstatus"></div>
+<div id="comment_57265928" class="cw">
+ <div id="comment_top_57265928" class="commentTop newcomment">
+ <div class="title">
+ <h4><a id="comment_link_57265928" name="comment_link_57265928" href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57265928" onclick="return D2.setFocusComment(57265928)" >Re:https://slashdot.org/.git</a>
+
+
+ <span id="comment_score_57265928" class="score"> (<a href="#" onclick="getModalPrefs('modcommentlog', 'Moderation Comment Log', 57265928); return false"><span class=opt>Score:</span>4</a>, Informative)</span></h4>
+ </div>
+ <div class="details">
+ <span class="by"><span class="byby">by </span><a href="//slashdot.org/~ls671">ls671</a> <span class="uid"><a href="//slashdot.org/~ls671">( 1122017 )</a></span></a></span><span class="writes" style="display:none"> writes:</span>
+ <span class="otherdetails" id="comment_otherdetails_57265928">
+ on Thursday September 06, 2018 @04:52PM (<span class="ind"></span><a href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57265928">#57265928</a>)
+ <small><a href="http://slashdot.org/" title="http://slashdot.org/" class="user_homepage_display">Homepage</a> </small>
+</span>
+ </div>
+ </div>
+ <div class="commentBody">
+ <div id="comment_body_57265928"><p>Slashdot is still using CVS try <a href="https://slashdot.org/CVS/" title="slashdot.org">https://slashdot.org/CVS/</a> [slashdot.org]</p><p>you will see, it works!<nobr> <wbr></nobr>:)</p></div>
+ </div>
+
+ <div class="commentSub" id="comment_sub_57265928">
+<span class="ind"></span><a id="reply_link_57265928" class="btn link" href="//tech.slashdot.org/comments.pl?sid=12580412&op=Reply&threshold=1&commentsort=0&mode=thread&pid=57265928" onclick="D2.replyTo(57265928); return false;">Reply to This</a> <span class="ind"></span><a class="btn link" href="//tech.slashdot.org/comments.pl?sid=12580412&threshold=1&commentsort=0&mode=thread&cid=57265748" onclick="return D2.selectParent(57265748)">Parent</a> <a href="#" class="comment_share_toggle btn link">Share</a>
+ <div class="comment_share sharethis-0 hide"><span class="au"></span>
+ <a class="janrain t" href="#" data-provider="twitter" data-message="Re:https://slashdot.org/.git by ls671 @slashdot" data-url="https://tech.slashdot.org/comments.pl?sid=12580412&cid=57265928" data-title="Re:https://slashdot.org/.git">twitter</a>
+ <a class="janrain f" href="#" data-provider="facebook" data-message="Re:https://slashdot.org/.git by ls671" data-url="https://tech.slashdot.org/comments.pl?sid=12580412&cid=57265928" data-title="Re:https://slashdot.org/.git">facebook</a>
+ <a class="janrain l" href="#" data-provider="linkedin" data-message="Re:https://slashdot.org/.git by ls671" data-url="https://tech.slashdot.org/comments.pl?sid=12580412&cid=57265928" data-title="Re:https://slashdot.org/.git">linkedin</a>
+ <a class="g" href="https://plus.google.com/share?url=https://tech.slashdot.org/comments.pl?sid=12580412%26cid=57265928" onclick="javascript:window.open(this.href,'', 'menubar=no,toolbar=no,resizable=yes,scrollbars=yes,height=600,width=600');return false;"><img src="//www.gstatic.com/images/icons/gplus-16.png" alt="Share on Google+"/></a>
+ </div>
+ <span class="ind"></span><a id="reply_link_57265928" title="Flag this comment as Inappropriate" class="ui-icon flag fright" href="//tech.slashdot.org/comments.pl?sid=12580412&op=flag&threshold=1&commentsort=0&mode=thread&pid=57265928" onclick="return false;">Flag as Inappropriate</a>
+</div>
+</div>
+
+<div id="replyto_57265928"></div>
+
+<ul id="group_57265928">
+ <li id="hiddens_57265928" class="hide"></li>
+</ul>
+
+</li></ul></li><li id="tree_57265754" class="comment oneline"><span class="ind"></span>
+<div id="comment_status_57265754" class="commentstatus"></div>
+<div id="comment_57265754" class="cw">
+ <div id="comment_top_57265754" class="commentTop newcomment">
+ <div class="title">
+ <h4><a id="comment_link_57265754" name="comment_link_57265754" href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57265754" onclick="return D2.setFocusComment(57265754)" >Your central git repo ...</a>
+
+
+ <span id="comment_score_57265754" class="score"> (<a href="#" onclick="getModalPrefs('modcommentlog', 'Moderation Comment Log', 57265754); return false"><span class=opt>Score:</span>1</a>)</span></h4>
+ </div>
+ <div class="details">
+ <span class="by"><span class="byby">by </span><a href="//slashdot.org/~Qbertino">Qbertino</a> <span class="uid"><a href="//slashdot.org/~Qbertino">( 265505 )</a></span></a></span><span class="writes" style="display:none"> writes:</span>
+ <span class="otherdetails" id="comment_otherdetails_57265754"></span>
+ </div>
+ </div>
+ <div class="commentBody">
+ <div id="comment_body_57265754"><p>... belongs behind ssh or, at least, behind http access and SSL.<br>If I catch you doing otherwise for anything other than FOSS software I'll smack you. Hard.</p></div>
+ </div>
+
+ <div class="commentSub" id="comment_sub_57265754">
+
+</div>
+</div>
+
+<div id="replyto_57265754"></div>
+
+<ul id="group_57265754">
+ <li id="hiddens_57265754" class="hide"></li>
+</ul>
+
+<ul id="commtree_57265754"><li id="tree_57265854" class="comment hidden"><span class="ind"></span>
+<div id="comment_status_57265854" class="commentstatus"></div>
+<div id="comment_57265854" class="cw">
+</div>
+
+<div id="replyto_57265854"></div>
+
+<ul id="group_57265854">
+ <li id="hiddens_57265854" class="hide"></li>
+</ul>
+
+</li><li id="tree_57265868" class="comment full contain"><span class="ind"></span>
+<div id="comment_status_57265868" class="commentstatus"></div>
+<div id="comment_57265868" class="cw">
+ <div id="comment_top_57265868" class="commentTop newcomment">
+ <div class="title">
+ <h4><a id="comment_link_57265868" name="comment_link_57265868" href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57265868" onclick="return D2.setFocusComment(57265868)" >Re:Your central git repo ...</a>
+
+
+ <span id="comment_score_57265868" class="score"> (<a href="#" onclick="getModalPrefs('modcommentlog', 'Moderation Comment Log', 57265868); return false"><span class=opt>Score:</span>4</a>, Informative)</span></h4>
+ </div>
+ <div class="details">
+ <span class="by"><span class="byby">by </span><a href="//slashdot.org/~tlhIngan">tlhIngan</a> <span class="uid"><a href="//slashdot.org/~tlhIngan">( 30335 )</a></span></a></span><span class="writes" style="display:none"> writes:</span>
+ <span class="otherdetails" id="comment_otherdetails_57265868"> <<a href="mailto:%5Bten.frow%5D+%5Bta%5D+%5Btodhsals%5D">[ten.frow] [ta] [todhsals]</a>>
+ on Thursday September 06, 2018 @04:41PM (<span class="ind"></span><a href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57265868">#57265868</a>)
+ <small> </small>
+</span>
+ </div>
+ </div>
+ <div class="commentBody">
+ <div id="comment_body_57265868"><blockquote><div><p>... belongs behind ssh or, at least, behind http access and SSL.<br>If I catch you doing otherwise for anything other than FOSS software I'll smack you. Hard.</p></div></blockquote><p>And it probably is. The thing is, the website owners are using git to version control and deploy their website (not a bad idea). So they develop their web site, push it to the central git repo, and whenever they need to go live, they just do a "git pull" on the webserver and it'll pull down the latest version of the website.</p><p>Problem is, they forget about the hidden<nobr> <wbr></nobr>.git directory git makes that stores all sorts of useful information and with a little persistence, allow you access to the raw source code since you can access the individual git objects. (Or maybe even clone it using git).</p></div>
+ </div>
+
+ <div class="commentSub" id="comment_sub_57265868">
+<span class="ind"></span><a id="reply_link_57265868" class="btn link" href="//tech.slashdot.org/comments.pl?sid=12580412&op=Reply&threshold=1&commentsort=0&mode=thread&pid=57265868" onclick="D2.replyTo(57265868); return false;">Reply to This</a> <span class="ind"></span><a class="btn link" href="//tech.slashdot.org/comments.pl?sid=12580412&threshold=1&commentsort=0&mode=thread&cid=57265754" onclick="return D2.selectParent(57265754)">Parent</a> <a href="#" class="comment_share_toggle btn link">Share</a>
+ <div class="comment_share sharethis-0 hide"><span class="au"></span>
+ <a class="janrain t" href="#" data-provider="twitter" data-message="Re:Your central git repo ... by tlhIngan @slashdot" data-url="https://tech.slashdot.org/comments.pl?sid=12580412&cid=57265868" data-title="Re:Your central git repo ...">twitter</a>
+ <a class="janrain f" href="#" data-provider="facebook" data-message="Re:Your central git repo ... by tlhIngan" data-url="https://tech.slashdot.org/comments.pl?sid=12580412&cid=57265868" data-title="Re:Your central git repo ...">facebook</a>
+ <a class="janrain l" href="#" data-provider="linkedin" data-message="Re:Your central git repo ... by tlhIngan" data-url="https://tech.slashdot.org/comments.pl?sid=12580412&cid=57265868" data-title="Re:Your central git repo ...">linkedin</a>
+ <a class="g" href="https://plus.google.com/share?url=https://tech.slashdot.org/comments.pl?sid=12580412%26cid=57265868" onclick="javascript:window.open(this.href,'', 'menubar=no,toolbar=no,resizable=yes,scrollbars=yes,height=600,width=600');return false;"><img src="//www.gstatic.com/images/icons/gplus-16.png" alt="Share on Google+"/></a>
+ </div>
+ <span class="ind"></span><a id="reply_link_57265868" title="Flag this comment as Inappropriate" class="ui-icon flag fright" href="//tech.slashdot.org/comments.pl?sid=12580412&op=flag&threshold=1&commentsort=0&mode=thread&pid=57265868" onclick="return false;">Flag as Inappropriate</a>
+</div>
+</div>
+
+<div id="replyto_57265868"></div>
+
+<ul id="group_57265868">
+ <li id="hiddens_57265868" class="hide"></li>
+</ul>
+
+<ul id="commtree_57265868"><li id="tree_57267330" class="comment oneline"><span class="ind"></span>
+<div id="comment_status_57267330" class="commentstatus"></div>
+<div id="comment_57267330" class="cw">
+ <div id="comment_top_57267330" class="commentTop newcomment">
+ <div class="title">
+ <h4><a id="comment_link_57267330" name="comment_link_57267330" href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57267330" onclick="return D2.setFocusComment(57267330)" >Re:</a>
+
+
+ <span id="comment_score_57267330" class="score"> (<a href="#" onclick="getModalPrefs('modcommentlog', 'Moderation Comment Log', 57267330); return false"><span class=opt>Score:</span>2</a>)</span></h4>
+ </div>
+ <div class="details">
+ <span class="by"><span class="byby">by </span><a href="//slashdot.org/~jrumney">jrumney</a> <span class="uid"><a href="//slashdot.org/~jrumney">( 197329 )</a></span></a></span><span class="writes" style="display:none"> writes:</span>
+ <span class="otherdetails" id="comment_otherdetails_57267330"></span>
+ </div>
+ </div>
+ <div class="commentBody">
+ <div id="comment_body_57267330">I do this, it is very convenient for deploying updates to the site. But I always put the web interface into a subdirectory, and only configure the web server to see that so the<nobr> <wbr></nobr>.git directory is not visible over HTTP. And dotfiles and directories are blocked in the webserver config for extra protection against accidental inclusion of invisible files.</div>
+ </div>
+
+ <div class="commentSub" id="comment_sub_57267330">
+
+</div>
+</div>
+
+<div id="replyto_57267330"></div>
+
+<ul id="group_57267330">
+ <li id="hiddens_57267330" class="hide"></li>
+</ul>
+
+</li></ul></li><li id="hidestring_57265754"><noscript><b class='more'><span class="ind"></span><a href="//tech.slashdot.org/comments.pl?sid=12580412&threshold=-1&commentsort=0&mode=thread&pid=57265754">1 reply</a> beneath your current threshold.</b></noscript></li></ul></li><li id="tree_57265760" class="comment hidden"><span class="ind"></span>
+<div id="comment_status_57265760" class="commentstatus"></div>
+<div id="comment_57265760" class="cw">
+</div>
+
+<div id="replyto_57265760"></div>
+
+<ul id="group_57265760">
+ <li id="hiddens_57265760" class="hide"></li>
+</ul>
+
+</li><li id="tree_57265776" class="comment hidden"><span class="ind"></span>
+<div id="comment_status_57265776" class="commentstatus"></div>
+<div id="comment_57265776" class="cw">
+</div>
+
+<div id="replyto_57265776"></div>
+
+<ul id="group_57265776">
+ <li id="hiddens_57265776" class="hide"></li>
+</ul>
+
+</li><li id="tree_57265820" class="comment full contain"><span class="ind"></span>
+<div id="comment_status_57265820" class="commentstatus"></div>
+<div id="comment_57265820" class="cw">
+ <div id="comment_top_57265820" class="commentTop newcomment">
+ <div class="title">
+ <h4><a id="comment_link_57265820" name="comment_link_57265820" href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57265820" onclick="return D2.setFocusComment(57265820)" >reheating yesterday's food</a>
+
+
+ <span id="comment_score_57265820" class="score"> (<a href="#" onclick="getModalPrefs('modcommentlog', 'Moderation Comment Log', 57265820); return false"><span class=opt>Score:</span>3</a>)</span></h4>
+ </div>
+ <div class="details">
+ <span class="by"><span class="byby">by </span><a href="//slashdot.org/~Tsolias">Tsolias</a> <span class="uid"><a href="//slashdot.org/~Tsolias">( 2813011 )</a></span></a></span><span class="writes" style="display:none"> writes:</span>
+ <span class="otherdetails" id="comment_otherdetails_57265820">
+ on Thursday September 06, 2018 @04:32PM (<span class="ind"></span><a href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57265820">#57265820</a>)
+ <small> </small>
+</span>
+ </div>
+ </div>
+ <div class="commentBody">
+ <div id="comment_body_57265820"><p>just an article from 2015 <a href="https://en.internetwache.org/dont-publicly-expose-git-or-how-we-downloaded-your-websites-sourcecode-an-analysis-of-alexas-1m-28-07-2015/" title="internetwache.org">https://en.internetwache.org/d...</a> [internetwache.org]</p><p>I can give you also next year's article about<nobr> <wbr></nobr>.file vulnerabilities. (spoiler alert) <a href="https://en.internetwache.org/scanning-the-alexa-top-1m-for-ds-store-files-12-03-2018/" title="internetwache.org">https://en.internetwache.org/s...</a> [internetwache.org]</p></div>
+ </div>
+
+ <div class="commentSub" id="comment_sub_57265820">
+<span class="ind"></span><a id="reply_link_57265820" class="btn link" href="//tech.slashdot.org/comments.pl?sid=12580412&op=Reply&threshold=1&commentsort=0&mode=thread&pid=57265820" onclick="D2.replyTo(57265820); return false;">Reply to This</a> <a href="#" class="comment_share_toggle btn link">Share</a>
+ <div class="comment_share sharethis-0 hide"><span class="au"></span>
+ <a class="janrain t" href="#" data-provider="twitter" data-message="reheating yesterday's food by Tsolias @slashdot" data-url="https://tech.slashdot.org/comments.pl?sid=12580412&cid=57265820" data-title="reheating yesterday's food">twitter</a>
+ <a class="janrain f" href="#" data-provider="facebook" data-message="reheating yesterday's food by Tsolias" data-url="https://tech.slashdot.org/comments.pl?sid=12580412&cid=57265820" data-title="reheating yesterday's food">facebook</a>
+ <a class="janrain l" href="#" data-provider="linkedin" data-message="reheating yesterday's food by Tsolias" data-url="https://tech.slashdot.org/comments.pl?sid=12580412&cid=57265820" data-title="reheating yesterday's food">linkedin</a>
+ <a class="g" href="https://plus.google.com/share?url=https://tech.slashdot.org/comments.pl?sid=12580412%26cid=57265820" onclick="javascript:window.open(this.href,'', 'menubar=no,toolbar=no,resizable=yes,scrollbars=yes,height=600,width=600');return false;"><img src="//www.gstatic.com/images/icons/gplus-16.png" alt="Share on Google+"/></a>
+ </div>
+ <span class="ind"></span><a id="reply_link_57265820" title="Flag this comment as Inappropriate" class="ui-icon flag fright" href="//tech.slashdot.org/comments.pl?sid=12580412&op=flag&threshold=1&commentsort=0&mode=thread&pid=57265820" onclick="return false;">Flag as Inappropriate</a>
+</div>
+</div>
+
+<div id="replyto_57265820"></div>
+
+<ul id="group_57265820">
+ <li id="hiddens_57265820" class="hide"></li>
+</ul>
+
+</li><li id="tree_57265826" class="comment hidden"><span class="ind"></span>
+<div id="comment_status_57265826" class="commentstatus"></div>
+<div id="comment_57265826" class="cw">
+</div>
+
+<div id="replyto_57265826"></div>
+
+<ul id="group_57265826">
+ <li id="hiddens_57265826" class="hide"></li>
+</ul>
+
+<ul id="commtree_57265826"><li id="tree_57265832" class="comment oneline"><span class="ind"></span>
+<div id="comment_status_57265832" class="commentstatus"></div>
+<div id="comment_57265832" class="cw">
+ <div id="comment_top_57265832" class="commentTop newcomment">
+ <div class="title">
+ <h4><a id="comment_link_57265832" name="comment_link_57265832" href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57265832" onclick="return D2.setFocusComment(57265832)" >KKK</a>
+
+
+ <span id="comment_score_57265832" class="score"> (<a href="#" onclick="getModalPrefs('modcommentlog', 'Moderation Comment Log', 57265832); return false"><span class=opt>Score:</span>2</a>)</span></h4>
+ </div>
+ <div class="details">
+ <span class="by"><span class="byby">by </span><a href="//slashdot.org/~Tsolias">Tsolias</a> <span class="uid"><a href="//slashdot.org/~Tsolias">( 2813011 )</a></span></a></span><span class="writes" style="display:none"> writes:</span>
+ <span class="otherdetails" id="comment_otherdetails_57265832"></span>
+ </div>
+ </div>
+ <div class="commentBody">
+ <div id="comment_body_57265832"><p><div class="quote"><p>Thats what you get on hiring those bootcamp "graduates"</p></div><p>Kode w/ Karlie Kloss, like it or not.</p></div>
+ </div>
+
+ <div class="commentSub" id="comment_sub_57265832">
+
+</div>
+</div>
+
+<div id="replyto_57265832"></div>
+
+<ul id="group_57265832">
+ <li id="hiddens_57265832" class="hide"></li>
+</ul>
+
+</li></ul></li><li id="tree_57265838" class="comment hidden"><span class="ind"></span>
+<div id="comment_status_57265838" class="commentstatus"></div>
+<div id="comment_57265838" class="cw">
+</div>
+
+<div id="replyto_57265838"></div>
+
+<ul id="group_57265838">
+ <li id="hiddens_57265838" class="hide"></li>
+</ul>
+
+</li><li id="tree_57265968" class="comment oneline"><span class="ind"></span>
+<div id="comment_status_57265968" class="commentstatus"></div>
+<div id="comment_57265968" class="cw">
+ <div id="comment_top_57265968" class="commentTop newcomment">
+ <div class="title">
+ <h4><a id="comment_link_57265968" name="comment_link_57265968" href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57265968" onclick="return D2.setFocusComment(57265968)" >Alternate headline: 99.8% websites are OK</a>
+
+
+ <span id="comment_score_57265968" class="score"> (<a href="#" onclick="getModalPrefs('modcommentlog', 'Moderation Comment Log', 57265968); return false"><span class=opt>Score:</span>2</a>)</span></h4>
+ </div>
+ <div class="details">
+ <span class="by"><span class="byby">by </span><a href="//slashdot.org/~jmichaelg">jmichaelg</a> <span class="uid"><a href="//slashdot.org/~jmichaelg">( 148257 )</a></span></a></span><span class="writes" style="display:none"> writes:</span>
+ <span class="otherdetails" id="comment_otherdetails_57265968"></span>
+ </div>
+ </div>
+ <div class="commentBody">
+ <div id="comment_body_57265968"><p>230 million websites. 400k poorly configured. 4*10^5/2.3*10^8 is less than 0.2% of websites surveyed screwed this up.</p><p>400k is a big number but it's good to know most developers aren't that stupid on this issue.</p></div>
+ </div>
+
+ <div class="commentSub" id="comment_sub_57265968">
+
+</div>
+</div>
+
+<div id="replyto_57265968"></div>
+
+<ul id="group_57265968">
+ <li id="hiddens_57265968" class="hide"></li>
+</ul>
+
+<ul id="commtree_57265968"><li id="tree_57266046" class="comment hidden"><span class="ind"></span>
+<div id="comment_status_57266046" class="commentstatus"></div>
+<div id="comment_57266046" class="cw">
+</div>
+
+<div id="replyto_57266046"></div>
+
+<ul id="group_57266046">
+ <li id="hiddens_57266046" class="hide"></li>
+</ul>
+
+</li><li id="hidestring_57265968"><noscript><b class='more'><span class="ind"></span><a href="//tech.slashdot.org/comments.pl?sid=12580412&threshold=-1&commentsort=0&mode=thread&pid=57265968">1 reply</a> beneath your current threshold.</b></noscript></li></ul></li><li id="tree_57266024" class="comment hidden"><span class="ind"></span>
+<div id="comment_status_57266024" class="commentstatus"></div>
+<div id="comment_57266024" class="cw">
+</div>
+
+<div id="replyto_57266024"></div>
+
+<ul id="group_57266024">
+ <li id="hiddens_57266024" class="hide"></li>
+</ul>
+
+<ul id="commtree_57266024"><li id="tree_57266638" class="comment oneline"><span class="ind"></span>
+<div id="comment_status_57266638" class="commentstatus"></div>
+<div id="comment_57266638" class="cw">
+ <div id="comment_top_57266638" class="commentTop newcomment">
+ <div class="title">
+ <h4><a id="comment_link_57266638" name="comment_link_57266638" href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57266638" onclick="return D2.setFocusComment(57266638)" >Re: yarn dist</a>
+
+
+ <span id="comment_score_57266638" class="score"> (<a href="#" onclick="getModalPrefs('modcommentlog', 'Moderation Comment Log', 57266638); return false"><span class=opt>Score:</span>2</a>)</span></h4>
+ </div>
+ <div class="details">
+ <span class="by"><span class="byby">by </span><a href="//slashdot.org/~TimMD909">TimMD909</a> <span class="uid"><a href="//slashdot.org/~TimMD909">( 260285 )</a></span></a></span><span class="writes" style="display:none"> writes:</span>
+ <span class="otherdetails" id="comment_otherdetails_57266638"></span>
+ </div>
+ </div>
+ <div class="commentBody">
+ <div id="comment_body_57266638">... Equifax types for free security tests from 3rd parties and press coverage, presumably...</div>
+ </div>
+
+ <div class="commentSub" id="comment_sub_57266638">
+
+</div>
+</div>
+
+<div id="replyto_57266638"></div>
+
+<ul id="group_57266638">
+ <li id="hiddens_57266638" class="hide"></li>
+</ul>
+
+</li></ul></li><li id="tree_57266028" class="comment oneline"><span class="ind"></span>
+<div id="comment_status_57266028" class="commentstatus"></div>
+<div id="comment_57266028" class="cw">
+ <div id="comment_top_57266028" class="commentTop newcomment">
+ <div class="title">
+ <h4><a id="comment_link_57266028" name="comment_link_57266028" href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57266028" onclick="return D2.setFocusComment(57266028)" >So?</a>
+
+
+ <span id="comment_score_57266028" class="score"> (<a href="#" onclick="getModalPrefs('modcommentlog', 'Moderation Comment Log', 57266028); return false"><span class=opt>Score:</span>2</a>)</span></h4>
+ </div>
+ <div class="details">
+ <span class="by"><span class="byby">by </span><a href="//slashdot.org/~cshark">cshark</a> <span class="uid"><a href="//slashdot.org/~cshark">( 673578 )</a></span></a></span><span class="writes" style="display:none"> writes:</span>
+ <span class="otherdetails" id="comment_otherdetails_57266028"></span>
+ </div>
+ </div>
+ <div class="commentBody">
+ <div id="comment_body_57266028"><p>An open git directory will be everything you need to reconstruct the site, more often than not from the same server you're targeting. Scary. Database servers are rarely open. Short of some serious hacking, there isn't a lot you're going to be able to do with this stuff once you've obtained the information you're waving around here.</p><p>Until such time as I see hackers actually logging in with this information and defacing github, I'm going to remain unconvinced of the severity of this one.</p></div>
+ </div>
+
+ <div class="commentSub" id="comment_sub_57266028">
+
+</div>
+</div>
+
+<div id="replyto_57266028"></div>
+
+<ul id="group_57266028">
+ <li id="hiddens_57266028" class="hide"></li>
+</ul>
+
+<ul id="commtree_57266028"><li id="tree_57266128" class="comment oneline"><span class="ind"></span>
+<div id="comment_status_57266128" class="commentstatus"></div>
+<div id="comment_57266128" class="cw">
+ <div id="comment_top_57266128" class="commentTop newcomment">
+ <div class="title">
+ <h4><a id="comment_link_57266128" name="comment_link_57266128" href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57266128" onclick="return D2.setFocusComment(57266128)" >Re:</a>
+
+
+ <span id="comment_score_57266128" class="score"> (<a href="#" onclick="getModalPrefs('modcommentlog', 'Moderation Comment Log', 57266128); return false"><span class=opt>Score:</span>2</a>)</span></h4>
+ </div>
+ <div class="details">
+ <span class="by"><span class="byby">by </span><a href="//slashdot.org/~OrangeTide">OrangeTide</a> <span class="uid"><a href="//slashdot.org/~OrangeTide">( 124937 )</a></span></a></span><span class="writes" style="display:none"> writes:</span>
+ <span class="otherdetails" id="comment_otherdetails_57266128"></span>
+ </div>
+ </div>
+ <div class="commentBody">
+ <div id="comment_body_57266128"><p>My website's<nobr> <wbr></nobr>.git directories are open intentionally. Makes for convenient mirroring and viewing of archives without having to hope and pray wayback machine picked up my obscure website.</p><p>I'm not too worried. It's just data on the filesystem, it's not executing programs. And the data is not supposed to contain any secrets. If it ever does then I better rewrite my git history.</p></div>
+ </div>
+
+ <div class="commentSub" id="comment_sub_57266128">
+
+</div>
+</div>
+
+<div id="replyto_57266128"></div>
+
+<ul id="group_57266128">
+ <li id="hiddens_57266128" class="hide"></li>
+</ul>
+
+<ul id="commtree_57266128"><li id="tree_57267568" class="comment hidden"><span class="ind"></span>
+<div id="comment_status_57267568" class="commentstatus"></div>
+<div id="comment_57267568" class="cw">
+</div>
+
+<div id="replyto_57267568"></div>
+
+<ul id="group_57267568">
+ <li id="hiddens_57267568" class="hide"></li>
+</ul>
+
+</li><li id="hidestring_57266128"><noscript><b class='more'><span class="ind"></span><a href="//tech.slashdot.org/comments.pl?sid=12580412&threshold=-1&commentsort=0&mode=thread&pid=57266128">1 reply</a> beneath your current threshold.</b></noscript></li></ul></li><li id="tree_57266554" class="comment oneline"><span class="ind"></span>
+<div id="comment_status_57266554" class="commentstatus"></div>
+<div id="comment_57266554" class="cw">
+ <div id="comment_top_57266554" class="commentTop newcomment">
+ <div class="title">
+ <h4><a id="comment_link_57266554" name="comment_link_57266554" href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57266554" onclick="return D2.setFocusComment(57266554)" >Re:</a>
+
+
+ <span id="comment_score_57266554" class="score"> (<a href="#" onclick="getModalPrefs('modcommentlog', 'Moderation Comment Log', 57266554); return false"><span class=opt>Score:</span>1</a>)</span></h4>
+ </div>
+ <div class="details">
+ <span class="by"><span class="byby">by </span>Anonymous Coward</span><span class="writes" style="display:none"> writes:</span>
+ <span class="otherdetails" id="comment_otherdetails_57266554"></span>
+ </div>
+ </div>
+ <div class="commentBody">
+ <div id="comment_body_57266554"><p>The most likely actual security implication is hard coded keys to 3rd party APIs.</p><p>Not that this is an inevitable threat, itâ(TM)s just something I could see being inadvertently exposed and useful without much additional effort.</p></div>
+ </div>
+
+ <div class="commentSub" id="comment_sub_57266554">
+
+</div>
+</div>
+
+<div id="replyto_57266554"></div>
+
+<ul id="group_57266554">
+ <li id="hiddens_57266554" class="hide"></li>
+</ul>
+
+<ul id="commtree_57266554"><li id="tree_57266652" class="comment oneline"><span class="ind"></span>
+<div id="comment_status_57266652" class="commentstatus"></div>
+<div id="comment_57266652" class="cw">
+ <div id="comment_top_57266652" class="commentTop newcomment">
+ <div class="title">
+ <h4><a id="comment_link_57266652" name="comment_link_57266652" href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57266652" onclick="return D2.setFocusComment(57266652)" >Re:</a>
+
+
+ <span id="comment_score_57266652" class="score"> (<a href="#" onclick="getModalPrefs('modcommentlog', 'Moderation Comment Log', 57266652); return false"><span class=opt>Score:</span>1</a>)</span></h4>
+ </div>
+ <div class="details">
+ <span class="by"><span class="byby">by </span><a href="//slashdot.org/~Orrin+Bloquy">Orrin Bloquy</a> <span class="uid"><a href="//slashdot.org/~Orrin+Bloquy">( 898571 )</a></span></a></span><span class="writes" style="display:none"> writes:</span>
+ <span class="otherdetails" id="comment_otherdetails_57266652"></span>
+ </div>
+ </div>
+ <div class="commentBody">
+ <div id="comment_body_57266652"><p><div class="quote"><p>itâ(TM)s</p></div><p>Clear something up, are you typing curly quotes/apostrophes on purpose or do you have your browser configured to automatically do that.</p></div>
+ </div>
+
+ <div class="commentSub" id="comment_sub_57266652">
+
+</div>
+</div>
+
+<div id="replyto_57266652"></div>
+
+<ul id="group_57266652">
+ <li id="hiddens_57266652" class="hide"></li>
+</ul>
+
+</li></ul></li><li id="tree_57266650" class="comment oneline"><span class="ind"></span>
+<div id="comment_status_57266650" class="commentstatus"></div>
+<div id="comment_57266650" class="cw">
+ <div id="comment_top_57266650" class="commentTop newcomment">
+ <div class="title">
+ <h4><a id="comment_link_57266650" name="comment_link_57266650" href="//tech.slashdot.org/comments.pl?sid=12580412&cid=57266650" onclick="return D2.setFocusComment(57266650)" >Re:</a>
+
+
+ <span id="comment_score_57266650" class="score"> (<a href="#" onclick="getModalPrefs('modcommentlog', 'Moderation Comment Log', 57266650); return false"><span class=opt>Score:</span>2</a>)</span></h4>
+ </div>
+ <div class="details">
+ <span class="by"><span class="byby">by </span><a href="//slashdot.org/~jonwil">jonwil</a> <span class="uid"><a href="//slashdot.org/~jonwil">( 467024 )</a></span></a></span><span class="writes" style="display:none"> writes:</span>
+ <span class="otherdetails" id="comment_otherdetails_57266650"></span>
+ </div>
+ </div>
+ <div class="commentBody">
+ <div id="comment_body_57266650"><p>What about if that<nobr> <wbr></nobr>.git folder (and the website's source code) included private keys for stuff. Or credentials/API keys for 3rd party services. Or credentials for database and other servers.</p></div>
+ </div>
+
+ <div class="commentSub" id="comment_sub_57266650">
+
+</div>
+</div>
+
+<div id="replyto_57266650"></div>
+
+<ul id="group_57266650">
+ <li id="hiddens_57266650" class="hide"></li>
+</ul>
+
+</li></ul></li><li id="tree_57266180" class="comment hidden"><span class="ind"></span>
+<div id="comment_status_57266180" class="commentstatus"></div>
+<div id="comment_57266180" class="cw">
+</div>
+
+<div id="replyto_57266180"></div>
+
+<ul id="group_57266180">
+ <li id="hiddens_57266180" class="hide"></li>
+</ul>
+
+</li><li id="tree_57266440" class="comment hidden"><span class="ind"></span>
+<div id="comment_status_57266440" class="commentstatus"></div>
+<div id="comment_57266440" class="cw">
+</div>
+
+<div id="replyto_57266440"></div>
+
+<ul id="group_57266440">
+ <li id="hiddens_57266440" class="hide"></li>
+</ul>
+
+</li><li id="tree_57266750" class="comment hidden"><span class="ind"></span>
+<div id="comment_status_57266750" class="commentstatus"></div>
+<div id="comment_57266750" class="cw">
+</div>
+
+<div id="replyto_57266750"></div>
+
+<ul id="group_57266750">
+ <li id="hiddens_57266750" class="hide"></li>
+</ul>
+
+</li><li id="hidestring_0"><noscript><b class='more'><span class="ind"></span><a href="//tech.slashdot.org/comments.pl?sid=12580412&threshold=-1&commentsort=0&mode=thread&pid=0">10 replies</a> beneath your current threshold.</b></noscript></li>
+ <li id="roothiddens" class="hide"></li>
+ </ul>
+
+
+
+
+
+<noscript><p><b>There may be more comments in this discussion. Without JavaScript enabled, you might want to <a href="//tech.slashdot.org/users.pl?op=editcomm">turn on Classic Discussion System</a> in your preferences instead.</b></p></noscript>
+<div id="discussion_buttons" class="clearfix">
+
+
+
+
+
+
+</div>
+
+
+<div class="newcmnt"><div id="replyto_0"></div></div>
+
+
+ <script type="text/javascript">
+<!--
+ D2.currents()['hidden'] = 16;
+ D2.currents()['full'] = 3;
+ D2.currents()['oneline'] = 13;
+ // D2.currents_total(32);
+
+ D2.abbrev_comments({});
+ D2.noshow_comments([57265676,57265706,57265724,57265824,57265748,57265854,57265760,57265776,57265826,57265838,57266046,57266024,57267568,57266180,57266440,57266750]);
+ D2.pieces_comments([57265702,57267314,57267598,57265754,57267330,57265832,57265968,57266638,57266028,57266128,57266554,57266652,57266650]);
+ D2.init_hiddens([57265724,57265706,57265676,57265754,57265968,57266128,0]);
+
+ D2.finishLoading();
+
+
+ if (D2.thresh_totals()[6][6][1] == 0) {
+ D2.replyTo(0, 1);
+ }
+
+
+//-->
+ </script>
+
+
+</div>
+
+
+
+
+
+ <div id="clickgen" class="grid_24 b">
+ <section class="grid_16 f">
+ <div>
+ <h4 class="nobg">
+ <a href="" class="selected btmrel" onClick="getRelatedStoriesForStory(345540);return false">Related Links</a>
+ <span class="tops fright">Top of the: <a href="" class="btmday" onClick="getTopStories(1);return false">day</a>, <a class="btmweek" href="" onClick="getTopStories(7); return false">week</a>, <a href="" onClick="getTopStories(30);return false" class="btmmonth">month</a>.</span>
+ </h4>
+ <ul class="nobullets bmrelatedlist">
+
+
+
+ <li>
+ <span class="cmntcnt"><span class="slant"></span><span>1175<span class="hide"> comments</span></span></span><a href="//tech.slashdot.org/story/18/01/08/1954203/james-damore-sues-google-for-allegedly-discriminating-against-conservative-white-men?sdsrc=popbyskidbtmprev">James Damore Sues Google For Allegedly Discriminating Against Conservative White Men</a>
+ </li>
+
+
+ <li>
+ <span class="cmntcnt"><span class="slant"></span><span>953<span class="hide"> comments</span></span></span><a href="//tech.slashdot.org/story/18/03/19/1736231/self-driving-uber-car-kills-arizona-woman-in-first-fatal-crash-involving-pedestrian?sdsrc=popbyskidbtmprev">Self-Driving Uber Car Kills Arizona Woman in First Fatal Crash Involving Pedestrian</a>
+ </li>
+
+
+ <li>
+ <span class="cmntcnt"><span class="slant"></span><span>707<span class="hide"> comments</span></span></span><a href="//tech.slashdot.org/story/17/11/16/0050243/twitter-bans-removes-verified-status-of-white-supremacists?sdsrc=popbyskidbtmprev">Twitter Bans, Removes Verified Status of White Supremacists</a>
+ </li>
+
+
+ <li>
+ <span class="cmntcnt"><span class="slant"></span><span>705<span class="hide"> comments</span></span></span><a href="//tech.slashdot.org/story/18/02/15/2255242/pro-gun-russian-bots-flood-twitter-after-parkland-shooting?sdsrc=popbyskidbtmprev">Pro-Gun Russian Bots Flood Twitter After Parkland Shooting</a>
+ </li>
+
+
+ <li>
+ <span class="cmntcnt"><span class="slant"></span><span>682<span class="hide"> comments</span></span></span><a href="//tech.slashdot.org/story/17/11/19/043243/i-see-things-differently-james-damore-on-his-autism-and-the-google-memo?sdsrc=popbyskidbtmprev">'I See Things Differently': James Damore on his Autism and the Google Memo</a>
+ </li>
+
+
+</ul>
+ </div>
+ </section>
+ <aside class="grid_8 st">
+ <section class="grid_24 f">
+ <div>
+ <h5 class="tlnav"><a href="//tech.slashdot.org/story/18/09/06/205221/ive-seen-the-future-of-consumer-ai-and-it-doesnt-have-one?sdsrc=nextbtmnext">next</a></h5>
+ <div class="grid_24">
+
+
+ <span class="grid_7 tcenter"><img src="//a.fsdn.com/sd/topics/ai_64.png" width="64" height="64" alt="AI"></span>
+
+ <p class="grid_12"><a href="//tech.slashdot.org/story/18/09/06/205221/ive-seen-the-future-of-consumer-ai-and-it-doesnt-have-one?sdsrc=nextbtmprev">'I've Seen the Future of Consumer AI, and it Doesn't Have One'</a></p>
+ <span class="grid_5 tcenter comments"><span class="cmntcnt_large fleft"><span class="slant"></span><span>97<span class="hide"> comments</span></span></span></span>
+
+ </div>
+ </div>
+ </section>
+ <section class="grid_24">
+ <div>
+ <h5 class="tlnav"><a href="//games.slashdot.org/story/18/09/06/1921222/eve-online-studio-acquired-by-korean-mmo-maker?sdsrc=prevbtmprev">previous</a></h5>
+ <div class="grid_24">
+
+ <span class="grid_7 tcenter"><img src="//a.fsdn.com/sd/topics/business_64.png" width="64" height="64" alt="Businesses"></span>
+
+ <p class="grid_12"><a href="//games.slashdot.org/story/18/09/06/1921222/eve-online-studio-acquired-by-korean-mmo-maker?sdsrc=prevbtmprev">'Eve Online' Studio Acquired By Korean MMO Maker</a></p>
+
+ <span class="grid_5 tcenter comments"><span class="cmntcnt_large fleft"><span class="slant"></span><span>57<span class="hide"> comments</span></span></span></span>
+ </div>
+ </div>
+ </section>
+ </aside>
+</div>
+ <div id="taboola-below-article-text-links"></div>
+<script type="text/javascript">
+ window._taboola = window._taboola || [];
+ _taboola.push({
+ mode: 'text-links-a',
+ container: 'taboola-below-article-text-links',
+ placement: 'Below Article Text Links',
+ target_type: 'mix'
+});
+</script>
+
+
+</section>
+ </div>
+ </div>
+ <div class="row top-space">
+
+
+ <div class="grid_24">
+ <!-- 728px ad -->
+
+ <div class="adwrap">
+<div id='div-gpt-ad-728x90_c'><script type='text/javascript'>
+googletag.cmd.push(function(){
+googletag.display('div-gpt-ad-728x90_c');});</script></div>
+</div>
+ <!-- end 728px ad -->
+ <!-- Slashdot Deals 6 Best Sellers -->
+ <div class="row deals-footer">
+ <div class="units-8 indent-2 deals-wrapper">
+ <div class="deals-header"><h1>Slashdot Top Deals</h1></div>
+ <div id="deals-output">
+ <script id="deals-template" type="text/x-handlebars-template">
+ {{#each deal}}
+ <div class="deal">
+ <a href="{{urlPath permalink}}?&utm_source=slashdot.org&utm_medium=dealfeed-footerfeed&utm_campaign={{slug}}" target="_blank">
+ <img src="{{main_image}}" alt="" />
+ </a>
+ <p class="title"><a href="{{urlPath permalink}}?&utm_source=slashdot.org&utm_medium=dealfeed-footerfeed&utm_campaign={{slug}}" target="_blank">{{title}}</a></p>
+ <p class="deal-price">{{centConversion price_in_cents}}</p>
+ </div>
+ {{/each}}
+ </script>
+ </div>
+ </div>
+ </div>
+ <script>
+ if ( isAdBlockActive ) {
+ $.getScript( "//a.fsdn.com/sd/js/scripts/min/deals-min.js", function(){
+ runDealsWidget();
+ });
+ }
+ </script>
+
+ <!-- End Slashdot Deals 6 Best Sellers -->
+ </div>
+ </div>
+ </div>
+ </div>
+ <!-- SMACKS: END COMMENTS SECTION -->
+</div>
+<!-- SMACKS: END COMMENTS CONTAINER -->
+
+
+
+
+<script type="text/javascript">
+
+$(function(){
+$('#firehose-filter').
+ focus(function(event){
+ gFocusedText = this;
+ }).
+ blur(function(event){
+ if ( gFocusedText === this ) {
+ gFocusedText = null;
+ }
+ });
+
+
+apply_updates_when( 'at-end', true);
+});
+</script>
+
+
+<!-- body end --><!-- footer type=current begin -->
+
+ </section>
+
+
+
+
+ <footer id="fhft" class="grid_24 nf aoc">
+ <div id="logo_nf" class="fleft">
+ <a href="//slashdot.org"><span>Slashdot</span></a>
+ </div>
+ <nav role="firehose footer">
+
+
+
+
+
+
+
+ <span class="ind"></span><a class="btn first" href="//tech.slashdot.org/comments.pl?sid=12580412&op=reply&threshold=1&commentsort=0&mode=thread&pid=" onclick="D2.replyTo(0); return false;">Post</a>
+
+ <a class="btn hide" id="footer_moderate_button">Moderate</a>
+ <a class="btn hide" id="footer_moderatorhelp_button">Moderator Help</a>
+ <a class="btn hide" id="footer_delete_button" title="Checked comments will be deleted.">Delete</a>
+ <script>
+ (function($){
+ var old_moderate_btn = $("#discussion_moderate_button");
+ if (old_moderate_btn.length) {
+ var moderate_btn = $("#footer_moderate_button");
+ moderate_btn.click(
+ function(){old_moderate_btn.click()}
+ );
+ moderate_btn.removeClass('hide');
+ }
+
+ var old_moderatorhelp_btn = $("#discussion_moderatorhelp_button");
+ if (old_moderatorhelp_btn.length) {
+ var moderatorhelp_btn = $("#footer_moderatorhelp_button");
+ moderatorhelp_btn.click(
+ function(){old_moderatorhelp_btn.click()}
+ );
+ moderatorhelp_btn.attr(
+ 'href', old_moderatorhelp_btn.attr('href')
+ );
+ moderatorhelp_btn.removeClass('hide');
+ }
+
+ var old_delete_btn = $("#discussion_delete_button");
+ if (old_delete_btn.length) {
+ var delete_btn = $("#footer_delete_button");
+ delete_btn.click(
+ function(){old_delete_btn.click()}
+ );
+ delete_btn.removeClass('hide');
+ }
+
+ $('#discussion_buttons').addClass('hide');
+ })(Slash.jQuery); // (function($){
+ </script>
+ <ul class="fleft">
+
+ <li class="fleft selected">
+ <span class="nbutton btn hide link reset" id="more_comments_button">
+ <a href="#" onclick="D2.ajaxFetchComments(0,1); return false">
+ <span id="more_comments_num_a" class="hide">Get more comments</span>
+ </a>
+ </span>
+ </li>
+
+
+ <li class="fleft">
+ <span class="loadedcommentcnt">32</span> of <span class="totalcommentcnt">32</span> loaded
+ </li>
+
+ </ul>
+
+ <script type="text/javascript">D2.finishLoading()</script>
+
+
+
+
+ <ul class="fright submitstory">
+ <li class="fright">
+ <a href="/submit">Submit<span class="opt"> Story</span></a>
+ </li>
+ </ul>
+ </nav>
+
+
+
+ </footer>
+ <section class="bq">
+ <blockquote class="msg grid_24" cite="https://slashdot.org">
+ <p>The hardest part of climbing the ladder of success is getting through
+the crowd at the bottom.</p>
+ <span class="slant"></span>
+ </blockquote>
+ </section>
+ <footer id="ft" class="grid_24">
+ <nav class="grid_10" role="footer">
+ <ul>
+ <li><a href="//slashdot.org/faq">FAQ</a></li>
+ <li><a href="//slashdot.org/archive.pl">Story Archive</a></li>
+ <li><a href="//slashdot.org/hof.shtml">Hall of Fame</a></li>
+ <li><a href="http://slashdotmedia.com/advertising-and-marketing-services/">Advertising</a></li>
+ <li><a href="http://slashdotmedia.com/terms-of-use/">Terms</a></li>
+ <li><a href="http://slashdotmedia.com/privacy-statement/">Privacy Statement</a></li>
+ <li id='eu_privacy' style='display:none'><a href="#" title="Privacy Choices" onclick="bizx.cmp.promptConsent();return false;">Privacy Choices</a></li>
+ <li><a href="http://slashdotmedia.com/opt-out-choices/">Opt-out Choices</a></li>
+ <li><a href="//slashdot.org/faq/slashmeta.shtml">About</a></li>
+ <li><a href="mailto:feedback@slashdot.org">Feedback</a></li>
+ <li><a href="#" onclick="set_mobile_pref('mobile',1);return false;">Mobile View</a></li>
+ <li><a href="//slashdot.org/blog">Blog</a></li>
+ </ul>
+ </nav>
+ <script>
+ if (window.is_euro_union) {
+ document.getElementById('eu_privacy').style.display = 'inline';
+ }
+ </script>
+ <br>
+
+ <div class="grid_14 tright tm">Trademarks property of their respective owners. Comments owned by the poster. <span class="nobr">Copyright © 2018 SlashdotMedia. All Rights Reserved.</span></div>
+ </footer>
+
+
+ <div class="overlay"></div>
+<div class="modal-box">
+ <a href="#" id="close-modal">Close</a>
+ <article class="modal-content">
+ </article>
+ <footer>
+</div>
+
+
+
+
+<div id="modal_cover" class="hide" onclick="hide_modal_box(); return false;"></div>
+<div id="modal_box" class="hide">
+ <div id="modal_box_content"></div>
+ <header class="n">
+ <span class="fadeout"></span>
+ <span class="fadeoutfade"></span>
+ <span class="pf"><a class="ico close" onclick="hide_modal_box(); return false;" href="#"><span>Close</span></a></span>
+ <h3 class="pf"><div id="logo"><a href="//slashdot.org">Slashdot</a></div><span id="preference_title"></span></h3>
+ </header>
+</div>
+
+ <!-- CCM Tag -->
+<script type="text/javascript">
+if (!window.is_euro_union) {
+ (function () {
+ /*global _ml:true, window */
+ _ml = window._ml || {};
+ _ml.eid = '771';
+
+ var s = document.getElementsByTagName('script')[0], cd = new Date(), mltag = document.createElement('script');
+ mltag.type = 'text/javascript'; mltag.async = true;
+ mltag.src = '//ml314.com/tag.aspx?' + cd.getDate() + cd.getMonth() + cd.getFullYear();
+ s.parentNode.insertBefore(mltag, s);
+ })();
+}
+</script>
+<!-- End CCM Tag -->
+
+<script type="text/javascript">
+window.google_analytics_uacct = "UA-32013-5";
+
+var _gaq = _gaq || [];
+
+
+
+
+
+ _gaq.push(['_setAccount', 'UA-36136016-1']);
+ _gaq.push(['b._setAccount', 'UA-32013-5']);
+ _gaq.push(['_setDomainName', '.slashdot.org']);
+ _gaq.push(['b._setDomainName', '.slashdot.org']);
+
+
+ _gaq.push(['_addIgnoredRef', 'slashdot.org']);
+ _gaq.push(['b._addIgnoredRef', 'slashdot.org']);
+
+
+
+ _gaq.push(['_setCustomVar', 1, 'User Type', 'Anon', 3]);
+ _gaq.push(['b._setCustomVar', 1, 'User Type', 'Anon', 3]);
+
+ _gaq.push(['_setCustomVar', 2, 'Page','article2', 3]);
+ _gaq.push(['b._setCustomVar', 2, 'Page','article2', 3]);
+
+
+
+
+
+// track beta behavior for user
+var betamatches = document.cookie.match(/betagroup=(-?\d+)/);
+
+if(betamatches && betamatches[1]) {
+ if(betamatches[1] == -1) {
+ _gaq.push(['_setCustomVar', 3, 'Beta-Usage','opt-out', 3]);
+ } else {
+ _gaq.push(['_setCustomVar', 3, 'Beta-Usage','unredirected', 3]);
+ }
+}
+
+
+
+ _gaq.push(['_trackPageview']);
+ _gaq.push(['b._trackPageview']);
+ _gaq.push(['_trackPageLoadTime']);
+ _gaq.push(['b._trackPageLoadTime']);
+
+
+if (!window.is_euro_union) {
+ (function() {
+ var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
+ ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
+ var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
+ })();
+}
+</script>
+
+<!-- CCM GA Push -->
+<script>
+ if (typeof _ml !== 'undefined' && _ml.us) {
+ if (_ml.us.tp && _ml.us.tp.length > 0) {
+ ga('set', 'dimension2', _ml.us.tp[0]);
+ }
+ if (_ml.us.pc && _ml.us.pc.length > 0) {
+ ga('set', 'dimension7', _ml.us.pc[0]);
+ }
+ ga('set', 'dimension3', _ml.us.ind);
+ ga('set', 'dimension4', _ml.us.cr);
+ ga('set', 'dimension5', _ml.us.cs);
+ ga('set', 'dimension6', _ml.us.dm);
+ ga('set', 'dimension8', _ml.us.sn);
+ }
+</script>
+
+<!-- Sticky Ads -->
+<script type="text/javascript">
+var topBannerViewed = false;
+if($('#div-gpt-ad-728x90_a').length > 0 && window.outerWidth >= 1070 && !isAdBlockActive){
+ $(window).scroll(function(){
+ var y = $(document).scrollTop();
+ var z = y + window.outerHeight;
+ var navOffset = 0;
+ var offset = [
+ $('.nav-wrap').outerHeight(true),
+ $('.nav-secondary-wrap').outerHeight(true)
+ ];
+ for(row in offset){
+ if(offset[row]) navOffset = navOffset + parseInt(offset[row]);
+ }
+ $('.adwrap-unviewed').each(function(){
+ var cls = 'adwrap-sticky';
+ var toggleCls = 'adwrap';
+ //$('.banner-wrapper').css('height', $('.banner-contain').outerHeight());
+ if($(this).hasClass('railad')) {
+ if(topBannerViewed){
+ var topPixels = $(this).offset().top;
+ navOffset += $('.adwrap').outerHeight();
+ if(y >= topPixels && y >= navOffset){
+ $('#slashboxes').css('top', 0).css('position','fixed').css('right',13);
+ } else {
+ $('#slashboxes').removeAttr('style');
+ }
+ }
+ return;
+ }
+ var topPixels = $(this).offset().top;
+ if(y >= topPixels && y >= navOffset){
+ $(this).addClass(cls);
+ $(this).removeClass('adwrap');
+ if(cls == 'adwrap-sticky') { //top banner
+ topBannerViewed = false;
+ $('#slashboxes').css('top',$(this).outerHeight() || 0).css('position','fixed').css('right',13);
+ }
+ if(topBannerViewed) {
+ console.log('hereeee');
+ $('#slashboxes').css('top', 0).css('position','fixed').css('right',13);
+ }
+ }else{
+ $(this).removeClass(cls);
+ $(this).addClass(toggleCls);
+ $('#slashboxes').removeAttr('style');
+ }
+ });
+ if($('.adwrap-viewed-banner').length > 0){
+ topBannerViewed = true;
+ $('.adwrap-viewed-banner').removeClass('adwrap-unviewed').removeClass('adwrap-sticky').addClass('adwrap');
+ }
+ if($('.adwrap-viewed-railad').length > 0){
+ $('.adwrap-viewed-railad').removeClass('adwrap-unviewed').removeClass('adwrap-railad-sticky');
+ $('#slashboxes').removeAttr('style');
+ }
+ });
+}
+</script>
+
+<!-- Piwik -->
+<script type="text/javascript">
+ var _paq = _paq || [];
+ _paq.push(["setCookieDomain", "*.slashdot.org"]);
+ _paq.push(['trackPageView']);
+ _paq.push(['enableLinkTracking']);
+function initPiwikAndNels() {
+ (function() {
+ var u="//analytics.slashdotmedia.com/";
+ _paq.push(['setTrackerUrl', u+'sd.php']);
+ _paq.push(['setSiteId', 40]);
+ var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0];
+ g.type='text/javascript'; g.async=true; g.defer=true; g.src=u+'sd.js'; s.parentNode.insertBefore(g,s);
+ })();
+
+ if(window.location.pathname == '/'){
+ var nelId = (location.search.split('nel_id=')[1] || '').split('&')[0];
+ var url = '/ajax.pl?op=nel';
+ if(nelId){
+ url += '&nel_id='+nelId;
+ }
+ $.ajax({
+ url: url,
+ success: function(html){
+ $('#firehoselist article').eq(1).after(html);
+ }
+ });
+ }
+ //announcement NEL
+ if(document.getElementById('announcementText')){
+ $('#announcementText').hide();
+ var hlUrl = '/ajax.pl?op=hl_nel';
+ if(nelId){
+ hlUrl += '&nel_id='+nelId;
+ }
+ $.ajax({
+ url: hlUrl,
+ success: function(html){
+ if(html.length < 10){
+ $('#announcementText').show();
+ return;
+ }
+ $('#announcementText').html(html).show();
+ },
+ error: function () {
+ $('#announcementText').show();
+ }
+ });
+ }
+}
+bizx.cmp.ifConsent('publisher', ['storage', 'measurement'], initPiwikAndNels);
+</script>
+
+
+<script type="text/javascript">
+_linkedin_data_partner_id = "113712";
+</script><script type="text/javascript">
+if (!window.is_euro_union) {
+(function(){var s = document.getElementsByTagName("script")[0];
+var b = document.createElement("script");
+b.type = "text/javascript";b.async = true;
+b.src = "https://snap.licdn.com/li.lms-analytics/insight.min.js";
+s.parentNode.insertBefore(b, s);})();
+}
+</script>
+<noscript>
+<img height="1" width="1" style="display:none;" alt="" src="https://dc.ads.linkedin.com/collect/?pid=113712&fmt=gif" />
+</noscript>
+
+<!-- Datonics -->
+<script async type="text/javascript" src="//ads.pro-market.net/ads/scripts/site-143573.js"></script>
+ <script id="after-content" type="text/javascript">
+(function( $, fn, console ){
+ $ && fn && $(function(){ fn($, console); });
+})(window.jQuery, window.pageload_done, window.console);
+</script>
+
+ <script type='text/javascript'>
+ if(!document.location.href.match(/source=autorefresh/)) {
+ document.write('<img src="//slashdot.org/images/js.gif?257">');
+ }
+</script>
+<noscript>
+ <img src="//slashdot.org/images/njs.gif?8">
+</noscript>
+ <div class="busy genericspinner hide"><span>Working...</span></div>
+ <script>
+ if(typeof(Storage)!=="undefined"){
+ window.scrollTo(0,sessionStorage.scrollPos);
+ $(window).scroll(function () {
+ //You've scrolled this much:
+ sessionStorage.scrollPos = $(window).scrollTop();
+ });
+ }
+ $(function(){
+ $('a').click(function(){
+ delete sessionStorage.scrollPos;
+ })
+ });
+ // window.onbeforeunload = function () {
+ // console.log('bakc button clicked');
+ // delete sessionStorage.scrollPos;
+ // }
+ window.onpopstate=function() {
+ delete sessionStorage.scrollPos;
+ }
+ </script>
+
+
+
+ <!-- 1x1 story page -->
+ <div id='div-gpt-ad-1x1'><script type='text/javascript'>
+googletag.cmd.push(function(){
+googletag.display('div-gpt-ad-1x1');});</script></div>
+
+
+ <script type="text/javascript">
+ if (!window.is_euro_union) {
+ window._taboola = window._taboola || [];
+ _taboola.push({flush: true});
+ }
+ </script>
+
+ </body>
+ </html>
+
+
+ <!-- footer type=current end -->
\ No newline at end of file
git://git.nikiroo.be / gofetch.git / blobdiff