Our great sponsors
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
Yikes, do all filters do that? https://github.com/higgins/privatize/blob/0.1.1/index.js#L98
Also, it's 2022 and I still have to remind people not to commit binary assets into git repos, as the repo will grow without bound: https://github.com/higgins/privatize/tree/main/release
That's the very problem that GitHub Releases were designed to address, and has the extra awesome benefit of using (currently) AWS S3 for distribution, which is almost certainly going to be faster and place less load upon github.com than .../raw/main/release/whatever.exe
This appears to be a design decision borrowed/inherited from git-crypt: https://github.com/AGWA/git-crypt#security
The gain is that encrypted output is deterministic (which git seems to require), with the trade-off of leaking some information (particularly that multiple encrypted ciphertexts are identical).
I'm not really a crypto expert, but it seems like a better alternative might be to use AES-GCM-SIV. It is designed to allow for nonce reuse, and has the advantage of being authenticated encryption. https://en.wikipedia.org/wiki/AES-GCM-SIV
Related posts
- GitLab plans to delete dormant projects from free accounts: Hopes to save a quarter of hosting costs by binning repos that haven't been touched for a year
- Amazing git additional tool to install: git-interactive rebase-tool
- How short can Git abbreviate? (2013)
- I switch from Eslint to Biome
- Gitlab Duo