gist
gist copied to clipboard
defunkt
Unanticipated privacy violation
If you create a private gist, and don't login your gist gets posted anonymously to github. However, it's not private at all, anybody can view it.
From a user perspective, I anticipated that my login credentials were cached from my last use. Instead I was not logged in. I think it should be an error to post privately and w/o login.
100% agree with this. I believe it should post the gist anonymously if and only if --anonymous flag is set.
I filed this after unintentionally posting private content to a public anonymous gist. Fortunately, github quickly removed it (on two occasions now their support has been quick and helpful).
What's the difference between an anonymous private gist and an anonymous public gist? As far as I know you can only see either if you know the URL (same as for an logged-in private gist).
@cdosborn even if you'd been logged in, private gists are viewable by anyone who knows the URL, exactly the same as anonymous private gists.
