X-Git-Url: http://git.nikiroo.be/?p=gofetch.git;a=blobdiff_plain;f=test%2Fexpected%2FSLASHDOT%2F0102639752;fp=test%2Fexpected%2FSLASHDOT%2F0102639752;h=5a44679af88e72a6148d4f2bd8dd8867e5d3004d;hp=406db36687d028a5dd7ab7dc1da408e62a9eef78;hb=3367f6256b5143b7cba2a61de36e74f389a5f379;hpb=b389651b0012a7ba1ff30d164958e155688ac216 diff --git a/test/expected/SLASHDOT/0102639752 b/test/expected/SLASHDOT/0102639752 index 406db36..5a44679 100644 --- a/test/expected/SLASHDOT/0102639752 +++ b/test/expected/SLASHDOT/0102639752 @@ -4,30 +4,38 @@ Thursday September 06, 2018 @11:30PM (msmash) from the security-woes dept. + o Reference: 0102639752 o News link: https://tech.slashdot.org/story/18/09/06/1954253/400000-websites-vulnerable-through-exposed-git-directories o Source link: https://www.scmagazine.com/home/news/400000-websites-vulnerable-through-exposed-git-directories/ Open .git directories are a bigger cybersecurity problem than many might imagine, at least according to a Czech security - researcher who discovered almost 400,000 web pages with an + researcher who [1]discovered almost 400,000 web pages with an open .git directory possibly exposing a wide variety of data. - From a report: Vladimir Smitka began his .git directory - odyssey in July when he began looking at Czech websites to - find how many were improperly configured and allow access to - their .git folders within the file versions repository. Open - .git directories are a particularly dangerous issue, he said, - because they can contain a great deal of sensitive - information. "Information about the website's structure, and - sometimes you can get very sensitive data such as database - passwords, API keys, development IDE settings, and so on. - However, this data shouldn't be stored in the repository, but - in previous scans of various security issues, I have found - many developers that do not follow these best practices," - Smitka wrote. Smitka queried 230 million websites to discover - the 390,000 allowing access to their .git directories. The - vast majority of the websites with open directories had a .com - TLD with .net, .de, .org and uk comprising most of the others. + From a report: + + > Vladimir Smitka began his .git directory odyssey in July + when he began looking at Czech websites to find how many were + improperly configured and allow access to their .git folders + within the file versions repository. Open .git directories are + a particularly dangerous issue, he said, because they can + contain a great deal of sensitive information. "Information + about the website's structure, and sometimes you can get very + sensitive data such as database passwords, API keys, + development IDE settings, and so on. However, this data + shouldn't be stored in the repository, but in previous scans + of various security issues, I have found many developers that + do not follow these best practices," Smitka wrote. Smitka + queried 230 million websites to discover the 390,000 allowing + access to their .git directories. The vast majority of the + websites with open directories had a .com TLD with .net, .de, + .org and uk comprising most of the others. + + + + [1] https://www.scmagazine.com/home/news/400000-websites-vulne- + rable-through-exposed-git-directories/ **