GitHub sued for aiding hacking in Capital One breach
<i>&gt; The plaintiffs believe that because Social Security numbers had a fixed format, GitHub should have been able to identify and remove this data</i><p>I don&#x27;t see how they can expect to enforce this with 100% accuracy.<p>SSNs do have a fixed format but other things could potentially follow the same format.<p>For example what if you had a library that lets you configure randomly generated codes in a XXX-XX-XXXX format and it just so happens one of the random codes matches a valid SSN pattern?<p>Is GitHub going to mess with your code? What if you have tests that matched on a hardcoded random number in a SSN-like format. If GitHub scrubs that then suddenly your CI tests might not pass. Also how would it deal with modifying your git history so others couldn&#x27;t clone it with the potentially sensitive data?