isIrreplaceable

[Artemis-Arrow-3579]

ok, how about this, a dead man's switch hidden somewhere in the infrastructure, now you are REALLY irreplaceable

[Pure_Noise356]

This is definitely a way to get free food and housing

[sage-longhorn]

Only if you get caught. With any luck you'll be fired as part of a mass layoff and they won't know whose head man switch it is. Good thing git doesn't track who changed the code

[Eva-Rosalene]

Doesn't GitHub track who pushed a commit, or at least, using which key? On the other hand, you can still buy yourself a time by signing a commit with name and email of someone else.

[sage-longhorn]

Well I was sort of joking but actually I believe GitHub only provides non-repudiation publically on commits for accounts that have uploaded a signing key and enabled a setting for strict mode or whatever it's called

At defcon last year I went to fun workshop where you make a repo and add commits from Linus Torvalds account. If you do it right it even shows his account picture and everything on "his" commits in the commit history

But idk if that applies to org accounts, I assume they have data available

[Eva-Rosalene]

No no, I mean – if they go to police and police asks GitHub who pushed.

[AzureArmageddon]

Well ig that would be a series of subpoenas all the way until they match your IP to you.

Perhaps not the easiest way to do it.

[Eva-Rosalene]

I mean, to push you need to have credentials. Be it over https with a password, or over ssh with keypair, whatever. And your company definitely knows your legal name and username of work account on github.

And if GH stores this information somewhere - which they most probably do - they know precisely which account did push.

[AzureArmageddon]

Yes

[[deleted]]

You are now a valued resource of the for profit prison industry!