Hacker News new | past | comments | ask | show | jobs | submit login

This is not an issue and just means that their wwwroot probably comes from a repo. Anyone who judges an engineer who made this decision poorly is silly.

I’d say it’s closer to good thing than bad thing due to simplicity.




Not parent you are answering to, and I don't have a dog in this "elon is a god"/"elon is the devil" fight, but let's stay factual: while the .gitignore is not an issue at all, serving dot files should virtually never be done


>I’d say it’s closer to good thing than bad thing due to simplicity.

Unless they intended to publish their .gitignore, I'd say it's closer to a bad thing than to a good thing to have random files from your repository open to the public.

The simplest S3 permissions is to allow "*" publically too, but simple doesn't make it better.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: