Re: [git-users] How to clear history of all repo url that has been accessed from local machine?

2014-12-01 Thread Konstantin Khomoutov
On Sun, 30 Nov 2014 15:32:45 -0800 (PST)
OC0915566 joseph.sie...@gmail.com wrote:

 My company is upgrading the laptops and so, they're selling the old
 ones. The problem is, we've been using the old laptops to access
 remote git repos and the employer would like to clean all possible
 traces of repo URLs that have been accessed in these laptops. How do
 I do this? We used Git Bash and Conemu. Will uninstalling Git Bash
 and Conemu be enough to delete all repo URL history in the laptops?
 or are these repo URL never been saved to local disk in the first
 place? Thanks

As to Git bash, the answer is most probably yes because bash saves
the input history to a file under the user's home directory (and you're
probably deleting the user profiles [1]).  As to Conemu, the answer
is also probably yes: native Windows software tends to use registry
for storing all kinds of random stuff, including history, and
contemporary programs would store this data in a personal user's
registry hive (which is just a set of files under the user's home
directory) so if you're deleting user profiles [1] you're deleting this
data as well.

Looking at the issue from another perspective... does knowing URLs of
those repos give away that much to a prying eye?  What matters is
repository contents not where that contents is located.  If you have
some private repos accessible publicly then have them properly
protected -- say, by using SSH keys, and have these keys properly
maintained.

Note that if you're absolutely paranoid (and you might have reasons to
be [2]), you have to wipe (and I mean it, not just format) hard drives
and then install Windows there (either from a rescue partition/DVD if
you're using whatever the vendor installer or from your own images).
If the buyer does not care much, installing FreeDOS after wiping could
be just fine.  It really depends on the expectations.

[1] If not, you really have to.
[2] When you're deleting an object from the filesystem, the object's
data stays intact and can be recovered using specialized software
unless it happens to later be overwritten by other filesystem
operations (typically -- storing new files).  Google for TestDisk
as one popular example.

-- 
You received this message because you are subscribed to the Google Groups Git 
for human beings group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to git-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [git-users] How to clear history of all repo url that has been accessed from local machine?

2014-12-01 Thread Konstantin Khomoutov
On Mon, 1 Dec 2014 08:25:03 -0600
John McKown john.archie.mck...@gmail.com wrote:

[...]
  ​You should really ask this sort of question on a data destruction
 group. It really isn't a git thing.​
 
 But since I'm already flapping my jaws: Personally, I would use
 something like a disk wipe utility. I am not really a Windows user
 (I use Linux), but you can Google for it to get some good hits. Such
 as: http://www.diskwipe.org/ which is not to be taken as a
 recommendation by me for this product, but is just an example. There
 are many such. If you are really worried about proprietary
 information, then I'd strongly suggest getting a DOD quality wipe.
 Another thing to think about is the other software on the laptop,
 especially the Windows. Windows in _NOT_ free! And you really should
 see what it would take to transfer the Windows license on the
 existing hardware to a new user. The same with any other non free
 software. If you don't, your company _might_ be libel to the
 copyright owners and be subject to being sued. I'm not really too
 sure of this latter, but if this is a large enough company, I'd run
 it by the legal department just for comfort.

By the way, this thought crossed my mind as well when I was writing my
response.  EULA explicitly prohibits relicensing, so yes, while IANAL,
I concur that consulting legal department would be a good thing.

-- 
You received this message because you are subscribed to the Google Groups Git 
for human beings group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to git-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.