TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

How to exfiltrate code from Bitbucket

133 pointsby et1337almost 4 years ago

12 comments

CSDudealmost 4 years ago
Not directly related, saw from the screenshots. Instead of using AWS secret keys in env variables like this, Bitbucket supports OIDC and you can safely build a trust relationship instead of static keys which is a security nightmare. <a href="https:&#x2F;&#x2F;support.atlassian.com&#x2F;bitbucket-cloud&#x2F;docs&#x2F;deploy-on-aws-using-bitbucket-pipelines-openid-connect&#x2F;" rel="nofollow">https:&#x2F;&#x2F;support.atlassian.com&#x2F;bitbucket-cloud&#x2F;docs&#x2F;deploy-on...</a><p>Disclaimer: Atlassian employee.
评论 #27919653 未加载
Shankalmost 4 years ago
This is the exact symptom I had with using AT&amp;T Fiber and GitHub, using “DMZ+ mode.” It sounds a lot like an MTU problem, and no, when I contacted GitHub they were absolutely flummoxed and couldn’t see any evidence of failure.<p>If you’re ever in a similar situation, try cloning over a different ISP or a VPN first. It’s pretty rare for a service like bitbucket to have a catastrophic failure like this without it being a downstream problem.
评论 #27921414 未加载
评论 #27926413 未加载
microtherionalmost 4 years ago
For all the technical excellence in git&#x27;s plumbing, I&#x27;m surprised that nobody has bothered to implement resumable cloning yet. Apart from the issues with bitbucket as a specific platform, every now and then I have to clone repos of a size that a simple bandwidth calculation tells me is going to be a multi-day endeavour, and even in the best families, a connection is not guaranteed to stay up that long.<p>So to this day, I keep having to clone locally and then rsync --partial the .git folder over the slow link. Surely it should not be an insurmountable problem to not throw away a partial clone, but instead offer to resume at a reasonable checkpoint?
评论 #27921814 未加载
linsomniacalmost 4 years ago
NOTE: Bitbucket has been migrating to a new platform internally, and has been having sporadic issues. Not sure if that is the case here. Story 13 days ago: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=27774987" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=27774987</a>
GrayShadealmost 4 years ago
This could be a network connectivity issue, like a IPv6 PMTU discovery problem.
luggedalmost 4 years ago
Should have just pinged them on hipchat, it should reach them maybe.
评论 #27919219 未加载
评论 #27919329 未加载
tyingqalmost 4 years ago
Tried cloning a much larger repo from his bitbucket account, and it works fine...<p><pre><code> $ git clone https:&#x2F;&#x2F;etodd@bitbucket.org&#x2F;etodd&#x2F;lasercrabs-archive Cloning into &#x27;lasercrabs-archive&#x27;... remote: Enumerating objects: 12162, done. remote: Counting objects: 100% (12162&#x2F;12162), done. remote: Compressing objects: 100% (9255&#x2F;9255), done. remote: Total 12162 (delta 2540), reused 12162 (delta 2540), pack-reused 0 Receiving objects: 100% (12162&#x2F;12162), 413.56 MiB | 14.34 MiB&#x2F;s, done. Resolving deltas: 100% (2540&#x2F;2540), done. Updating files: 100% (11141&#x2F;11141), done.</code></pre>
oaueaalmost 4 years ago
Bitbucket has been... not good lately. And that&#x27;s putting it kindly. I don&#x27;t know if anyone from Atlassian reads HN, but please... Don&#x27;t force us to migrate away.
评论 #27922182 未加载
评论 #27922008 未加载
评论 #27925887 未加载
rbutalmost 4 years ago
I migrated our companies repositories away from Bitbucket a few days ago using git clone —mirror and it worked fine. Am I missing something, or were you just unlucky?
karmicthreatalmost 4 years ago
Makes me glad I have been migrating away from bitbucket as I update projects lately.
flerchinalmost 4 years ago
This is ridiculous. git clone is expected to work.
alanfranzalmost 4 years ago
Clickbait-y and misleading. Exfiltration means getting hold of data which you shouldn&#x27;t be able to access or download.
评论 #27919118 未加载
评论 #27919173 未加载
评论 #27919303 未加载
评论 #27919408 未加载
评论 #27919376 未加载
评论 #27919298 未加载
评论 #27919350 未加载