Hey Judy, don’t make it bad
Last week we explained how we greatly reduced the rendering time of our web views by switching our escaping routines from Ruby to C. This speed-up was two-fold: the C…
Category
Engineering
Heads up: nosniff header support coming to Chrome and Firefox
Both GitHub and Gist offer ways to view "raw" versions of user content. Instead of viewing files in the visual context of the website, the user can see the actual…
Content Security Policy
We've started rolling out a new security feature called "Content Security Policy" or CSP. As a user, it will better protect your account against XSS attacks. But, be aware, it…
Escape Velocity
We work very hard to keep GitHub fast. Ruby is not the fastest programming language, so we go to great lengths benchmarking and optimizing our large codebase: our goal is…
Yummy cookies across domains
Last Friday we announced and performed a migration of all GitHub Pages to their own github.io domain. This was a long-planned migration, with the specific goal of mitigating phishing attacks…
New GitHub Pages domain: github.io
Beginning today, all GitHub Pages sites are moving to a new, dedicated domain: github.io. This is a security measure aimed at removing potential vectors for cross domain attacks targeting the…
Upcoming IP address changes
As we expand our infrastructure, we are making changes to the IP addresses currently in use. If you are explicitly whitelisting GitHub in your firewall rules, please make sure that…
GitHub for Windows Recent Improvements
It’s been almost a year since we first released GitHub for Windows. Today we just shipped version 1.0.38. That’s 38 updates since 1.0! As we’ve said before, we ship early…
TCMalloc and MySQL
Over the last month or so, we noticed steady week-over-week rises in overall MySQL query time. A poorly-performing database makes for a slow site and a slow site makes for…
Introducing Boxen
Today we’re proud to open source Boxen, our tool for automating and managing Macs at GitHub. Boxen started nearly a year ago as a project called “The Setup” — a…
Recent Code Search Outages
Last week, between Thursday, January 24 and Friday, January 25 we experienced a critical outage surrounding our newly-launched Code Search service. As always, we strive to provide detailed, transparent post-mortems…
Secrets in the code
Programming often involves keeping a bunch of secrets around. You've got account passwords, OAuth tokens, SSL and SSH private keys. The best way to keep a secret is, well, to…
Releasing Make Me
A few months ago, GitHub HQ 2.0 got a MakerBot Replicator 2. GitHubbers started printing almost immediately due to the easy setup but having to leave a laptop connected was…
A More Transparent Clipboard Button
Copying long lines of text and shas to your clipboard has been just a click away for a few years now. Today we're putting a new face on that click-to-copy…
Downtime last Saturday
On Saturday, December 22nd we had a significant outage and we want to take the time to explain what happened. This was one of the worst outages in the history…