Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Releases should not leak unnecessary information #5807

Open
dsnet opened this Issue Mar 2, 2019 · 0 comments

Comments

Projects
None yet
2 participants
@dsnet
Copy link
Contributor

dsnet commented Mar 2, 2019

Run the following:

$ curl -L https://github.com/google/protobuf/releases/download/v3.6.1/protobuf-all-3.6.1.tar.gz 2>/dev/null | tar -tzvf - | head
drwxr-xr-x acozzette/primarygroup 0 2018-07-30 15:27 protobuf-3.6.1/
-rw-r--r-- acozzette/primarygroup 227 2018-06-04 15:50 protobuf-3.6.1/six.BUILD
drwxr-xr-x acozzette/primarygroup   0 2018-07-30 15:27 protobuf-3.6.1/examples/
-rwxr-xr-- acozzette/primarygroup 1750 2018-07-23 13:56 protobuf-3.6.1/examples/add_person.py
-rw-r--r-- acozzette/primarygroup 1685 2018-07-23 13:56 protobuf-3.6.1/examples/WORKSPACE
-rw-r--r-- acozzette/primarygroup 2800 2018-07-23 13:56 protobuf-3.6.1/examples/add_person.cc
-rw-r--r-- acozzette/primarygroup 2976 2018-06-04 15:50 protobuf-3.6.1/examples/AddPerson.java
-rw-r--r-- acozzette/primarygroup 2268 2018-07-23 13:56 protobuf-3.6.1/examples/list_people.cc
-rw-r--r-- acozzette/primarygroup 1234 2018-07-23 13:56 protobuf-3.6.1/examples/addressbook.proto
-rw-r--r-- acozzette/primarygroup 2520 2018-07-23 13:56 protobuf-3.6.1/examples/list_people_test.go

You can see that the user's name is acozzette. The release archives should probably be packed in a developer-agnostic way.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.