The RIAA, GitHub, and youtube-dl

Posted Nov 12, 2020 13:22 UTC (Thu) by jak90 (subscriber, #123821)
In reply to: The RIAA, GitHub, and youtube-dl by Sesse
Parent article: The RIAA, GitHub, and youtube-dl

No. Somebody uploaded a clone of the youtube-dl repository and referenced its HEAD in an issue on the DMCA repository, which makes that specific reference from the global object storage available through the "victim" repository. This meant you could checkout the master branch of the youtube-dl repository like this:

git clone -n https://github.com/github/dmca.git youtube-dl && \
	cd youtube-dl && \
	git fetch origin 416da574ec0df3388f652e44f7fe71b1e3a4701f && \
	git checkout FETCH_HEAD

They finally fixed that on October 28th, though.

fatal: remote error: upload-pack: not our ref 416da574ec0df3388f652e44f7fe71b1e3a4701f

The RIAA, GitHub, and youtube-dl

Posted Nov 12, 2020 15:24 UTC (Thu) by pkern (subscriber, #32883) [Link]

In my understanding it still required forking the dmca repo and uploading to that fork. The reference from an issue just made it permanent. Note that GitHub threatened to ban users who keep doing that, according to https://www.bleepingcomputer.com/news/software/github-thr...