Two-factor Authentication
Today we're adding two-factor authentication to GitHub. When you enable this feature, it adds an additional layer of security to your account. When logging in to GitHub, after providing your…
GitHub Blog Search
Search Results for: Security
Introducing GitHub Sudo Mode
In the ongoing effort to keep our users safe, we recently took inspiration from the Unix sudo command. We wanted to require password confirmation for dangerous actions on GitHub.com, but…
Escape Velocity
We work very hard to keep GitHub fast. Ruby is not the fastest programming language, so we go to great lengths benchmarking and optimizing our large codebase: our goal is…
Yummy cookies across domains
Last Friday we announced and performed a migration of all GitHub Pages to their own github.io domain. This was a long-planned migration, with the specific goal of mitigating phishing attacks…
New GitHub Pages domain: github.io
Beginning today, all GitHub Pages sites are moving to a new, dedicated domain: github.io. This is a security measure aimed at removing potential vectors for cross domain attacks targeting the…
Today’s Email Incident
Earlier today a routine system email was incorrectly sent to many of our GitHub Enterprise customers. In these errant emails, customer email addresses were included in the To: field, making…
Global Issue Search
There are a more than a million open issues to be found across all public repositories hosted on GitHub right now. Finding a specific issue can be a tedious process…
GitHub Enterprise 11.10.290 Release
We're excited to announce the latest release of GitHub Enterprise. We're shipping this version with our new Command Bar, User Profile Pages, and much more. Along with a variety of…
First OctoGala a Success!
We hosted our first OctoGala here in San Francisco at Brick and Mortar. Not only did we have a night of glitz and glamor, but we were able to raise…
Responsible Disclosure Policy
There has been some confusion over today's security vulnerability and our policy on responsible disclosure and account suspension that I'd like to clear up. Three days ago, user @homakov opened…
Settings Refresh
Today we pushed a redesigned settings page that will make it easier to find and edit settings for your personal account as well as any organizations you own. The major…
GitHub Reflog v1.5.16
Welcome to the The GitHub Reflog — the weekly chronicle of remarkable GitHub repos and community activity. For previous editions, check out The Reflog Archive. Thanks to the awesome work…
Rolling out the Redcarpet
Here at GitHub, we love Markdown. We use it everywhere: to render the wikis, issues, pull requests, and all user-generated comments. We even encourage developers to write their READMEs in…
Sidejack Prevention Phase 2: SSL Everywhere
Last Tuesday, we rolled out a secure cookies for all SSL-protected pages. This meant that all private repositories, user dashboards, all admin settings (even for free users and repositories) were…
Lift Hits 1.0
Lift, the simply functional web framework, has hit version 1.0. Congrats to @dpp and all the contributors! img http://img.skitch.com/20090226-d9d9wkns36wte1spthgpcu67if.png http://liftweb.net What is Lift? According to the website: Lift is an…
GitHub Rebase #10
And we're back! Rebase went on a bit of hiatus, but it has returned in full force for 2009. Read on for the latest and greatest coming out of GitHub!…
Wiki Subdomain
We just rolled out a security fix that puts all wikis under the @wiki.github.com@ subdomain. This means they can execute arbitrary JavaScript (like scriptaculous does, or maybe the Lighthouse Badge)…
GitHub Rebase #2
It looks like I've been enlisted as an official blogger to bring you the latest and greatest work that's coming out of GitHub! Sit back, ogle at the graphs, and…
Repo Deletion for Everyone
Here's our latest feature: Did ya spot it? It's the delete button! No, we're not crazy. Prior to today, if you had a project that had been forked, you were…
SSH Keys Generated on Debian/Ubuntu Compromised
A security warning posted on the Debian security list today warns that SSH keys generated on Debian based systems (including Ubuntu) have a highly predictable random number generator. This corroborates…