Hacker News .hnnew | past | comments | ask | show | jobs | submitlogin

At least https://www.tesla.com/.git/config is not accessible but still. This should never happen to a company that considers itself a software company first and a car company second.


One place I worked for exposed .git on a PHP site to the world. Infra was ho-hum about the report until they got a PoC which cloned the repo.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: