Hacker Newsnew | past | comments | ask | show | jobs | submit | mendym's commentslogin

> Our teams are working on the restoration path for returning our impacted git repositories to a public state.

Cant they just make them public? Am i missing something?


If they posted it on an error or outage page then they probably didn't mean to set it that way, and that implies that there was a non-obvious mistake. They might be doing something silly with their permissions.

And that is presuming that this is some sort of technical issue.


...or they mistakenly droppen them. :)


"As part of an internal change task" is the justification listed. Maybe this is a genuine accident.

Someone paranoid might think that the for-profit management at Elastic is trying to pull some of their previously free software behind a paid-for product. Perhaps they accidentally marked all repos private when they only intended to make a few of them private. They have had beef with AWS in the past where they changed their licensing due to things AWS was doing. So I'll fully believe that it was a genuine accident if all the formerly public repos become public again.


unlikely, over the summer they announced that they were going to be more opensource, <https://www.elastic.co/blog/elasticsearch-is-open-source-aga...>


It's a configuration error (sorry!). Also with thousands of forks this would be a pretty pointless operation. Once something is out (and that includes a license), you cannot just take it back — it will be there forever.

[I work for Elastic]


I'm guessing someone accidentally pushed something they shouldn't have


Not that easy as there are some consequences when you move from public repo to private repo.


I seem to remember someone posting about this once -- you lose all your stars / followers when going public -> private, and they're not restored when you go back.


You can see this now on the link in the post. The repo is currently sitting at

Watch: 194 Forks: 0 Stars: 183


I would bet, as a result of this and other things like fork management, that they'll be working with GitHub support to try to reverse the go-private and all its consequences.


If it's this: https://news.ycombinator.com/item?id=41060102 Then they will need to delete(or rename), remake the repos and push again. Any security problem would also require doing some due diligence to make sure you really squashed it.


it could be that they might have discovered some credential leak or secrets leakage in the repo and they are fixing it right now.


I don't think so, if you accidentally leak an api key you invalidate that specific key.


Yeah. This was a configuration error. Keys you just rotate. Making repos private accidentally creates a whole new mess with forks, stars,... Not recommended

[I work for Elastic]


It's perhaps an issue on GitHub's end


Pretty sure they would call that out in the status update if it was out of their control.


Why? The issue affects their users regardless of whose fault it is.


Does GOG games have built-in way to launch a windows game via proton?

Because currently my main reason for using steam is the easy linux installation


Heroic is reasonably seamless - it integrates with GOG and your Steam library, and by extension Proton. Pretty popular among Steam Deck users.

https://heroicgameslauncher.com/


I just want to play HoMM3 on Mac OS... maybe one day


Oh man, I just showed my kid homm3 with HD mod. I dunno what are VM options exist on Mac OS, but it may be the way.


I use Lutris for that, a bit clunky (especially updating games) but it does work.


See the other two posts for recommendations, but be aware that neither of the options listed is at the level of experience Steam may have spoiled us with. My last try was 4 or 5 months ago and I ended up just going with a VM.


I have heard of alternative game launchers that will take care of launching Windows games (including GOG titles) under Linux.

But I usually just end up purchasing Linux games through GOG and Windows games through Steam.


Lutris the popular option. Heroic is another but is a chromium app fyi.



Now it shows a 'Temporarily Offline' message


i see more than 2


I assume that if this is a bad actor, then account email/name will be leaked?


link from hindenburgresearch

https://hindenburgresearch.com/roblox/



is there a reason to use the borg encryption[1] over rclone crypt[2] or vise versa?

1. https://borgbackup.readthedocs.io/en/2.0.0b11/quickstart.htm... 2. https://rclone.org/crypt/


Rclone crypt is not much related to Borg. That’s a tool for copying files from one machine to another, in this case encrypting before copying. That’s rsync, working with cloud.

Borg is a different tool, for backup. It deduplicates, encrypts, snapshots, checksums, compresses, … source directories into a single repository. It doesn’t work with files, rather blocks of data. It includes commands for repository management, like searching data, pruning or merging snapshots, etc. You will then transfer or sync the repository to wherever you want, with a tool such as rsync/SSH or rclone. Rclone is now natively supported, so that you don’t need to store the repository locally and on remote, rather back up directly to remote.


I would also wonder what the difference between this package and Restic is. as far as efficiency and encryption.


How good at deduping is this when encryption is enabled? I was looking at rsync.net and it killed me that they don't support encryption in a sane way.


It's very sane: encrypt the bits, then send it to the host.

Curious what you think is not right with their methods.


Sure, but there is some requirement to not just blindly copy everything over-and-over, and that is where I've seen things get tricky before. If you enable encryption you have to re-upload the entire snapshot periodically.

It's annoying because if you have TBs of stuff that blows. I'm just curious what systems exist for incremental, encrypted backups that don't require full uploading new snapshots.

See here in the NOTE section. Re-reading this, it might a limitation of Duplicity. https://www.rsync.net/resources/howto/duplicity.html


Author of HashBackup here.

Duplicity is very old backup software that uses the "full + incremental" strategy on a file-by-file basis, like tape backup systems. The full backup must be restored first and then all of the incrementals. This becomes impractical over time, so as with tapes, you must periodically repeat the full backup so the incremental chains do not become too long.

Modern backup programs split files into blocks and keep track of data at the block level. You still do an initial full backup followed by incrementals, but block tracking allows you to restore any version of any file without restoring the full first and all following incrementals. The trade-off is in complexity: tracking blocks is more complex than tracking files.

It has nothing to do with encryption.


> they don't support encryption in a sane way.

Should the storage provider provide support for encryption on their end? Would you not want to store the keys locally?


The provider should not. It provides a false sense of security.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: