> Another common mistake is having /.git/ available on the domain itself, often ... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

mschuster91 on Feb 20, 2018 | parent | context | favorite | on: A Hacker Has Wiped a Spyware Company’s Servers

> Another common mistake is having /.git/ available on the domain itself, often with PHP sites or backend-less SPAs this is common

Yeah and same for .svn and .cvs (which may happen to include your VCS credentials in that directory, too).

Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact