名为openbilibili 的用户在GitHub上发布了“哔哩哔哩 bilibili 网站后台工程 源码”项目,网友发现代码库包含了部分硬编码的用户名密码等敏感信息。 此项目被Clone了数千份后,Bilibili 发出 了DMCA(Digital Millennium Copyright Act千禧年数字版权法) 通知GitHub删除该代码库,  随后GitHub关停了相关项目。

根据GitHub 的透明政策,会公开对方发来的 DMCA 删除通知,原文如下:

Hello Dear Github:

We Are:

Bilibili Security Group.It is nice to be able to yse Github such a professional and effcient platform,and mpw we have a need to be very hopefully able to get Github’s support and resolution.I sent the mail yesterday and the mail attachments is the my signature!!

We have read and understand GitHub’s Guide to Filling a DMCA Notice

Some one created a Repository called ‘openbilibili/go-common’ two hours ago and many people forked it or clone it and reupload the repository,which contained too much sensitive information,such as secret key,database address,very important api key and so on.If these information are found by other people in Github,our company will be left out of pocket.

The following is Github’s URL and Screenshots about this Repository:

[private]

Since the reupload repositories and the contains our company’s important source code,algorithm and system configuration,,so we hope Giuhub as soon as possible to help us completely remove the reupload repositories and thank you very much

The following is our contact information:

  • Company Name : Bilibili
  • My e-mail Address: [private]
  • Cellphone: [private]
  • Company Address: [private]
  • Website: https://www.bilibili.com/

I have a good faith belief that use of the copyrighted materials described above on the infringing web pages is not authorized by the copyright owner, or its agent, or the law. I have taken fair use into consideration.

I swear, under penalty of perjury, that the information in this notification is accurate and that I am the copyright owner, or am authorized to act on behalf of the owner, of an exclusive right that is allegedly infringed.

Hoping for your response and thanks again.
Please help us!!!

Bilibili 虽然是美国上市的公司,但DMCA删除通知写的很匆忙,以“帮帮我们吧”三个感叹号结尾。

原文地址:https://github.com/github/dmca/blob/master/2019/04/2019-04-23-bilibili.md