FuckHub Actions (or: what even is privacy?)

siiky

2023/08/31

2023/08/31

en

Following the recent deadline of my student plan on FuckHub, I updated the mirror repo of my capsule/website to have no history; added a simple index page pointing to the main website (where you're reading from, hopefully); and made the repo public.

GitHub Pages (GitHub's personal website offering) uses GitHub Actions under the hood (GitHub's CI offering?) to build the site and publish it. So far so good.

The Actions page, in addition to the currently running Actions, has a list of past Actions. Each of those has associated one commit, and clicking it you get to its commit page, such as this:

At the top of the page you can read this banner:

This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.

I wiped everything out, after all. Nonetheless you can see the changes.

If that wasn't enough, hitting "Browse files" also works! You get the list of files of the repository at that commit, you can browse, open, and read them!

EVERYTHING is still somewhere in FuckHub's servers. I can actually browse all of the repo's history, up until some known commit (e.g., if I know commit abc123, I can read that and all parent commits on the website).

Thankfully, I think, I HOPE, it's not possible to git clone the repo.