# GitHub Deletion May Not Erase All Data, Researchers Warn ⚠️

**URL:** <https://onehack.st/t/github-deletion-may-not-erase-all-data-researchers-warn/287738>\
**Category:** News & Articles\
**Created:** [July 27, 2024, 3:03pm UTC](https://onehack.st/t/github-deletion-may-not-erase-all-data-researchers-warn/287738 "2024-07-27T15:03:41Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [July 27, 2024, 3:03pm UTC](https://onehack.st/t/github-deletion-may-not-erase-all-data-researchers-warn/287738/1 "2024-07-27T15:03:41Z")

</div>

**Summary:**

1. **Persisting Data Risk** : Truffle Security researchers found that data from deleted GitHub repositories, including sensitive information like API keys, may still be accessible through forks, posing a security risk.

2. **Cross Fork Object Reference (CFOR)**: The proposed term CFOR describes how one fork can access data from another, even if the original or forked repository is deleted, highlighting an unexpected vulnerability.

3. **GitHub’s Stance** : GitHub maintains that this behavior is documented and expected due to the inherent nature of fork networks. However, researchers argue that this contradicts user expectations about data privacy and deletion.

[Read more on The Register](https://www.theregister.com)