{"comments":[{"comment":{"id":7497663,"creator_id":858165,"post_id":2426056,"content":"This seems like a weird thing to be concerned about. Any given time zone there are going to be millions if not billions of people.\n\nGit also \"leaks\" your system username and hostname IIRC by default which might be your real name. A fake name and email would pretty much be sufficient to make any \"leaked\" time zone information irrelevant. \n\nGranted... I wonder if stuff like this is how they caught those North Korean \"employees.\"\n\nhttps://arstechnica.com/?p=2042326\n\nFWIW, I'd also suggest just picking the wrong time zone (but a close one) over UTC or something like that. UTC seems like it's just \"HEY LOOK AT ME! I'M TRYING TO HIDE SOMETHING!\" One on the other side of the world, if you sleep like most people, could be defeated by doing an analysis of when the commits were made on average vs other folks from random repositories to find the average time of day and then reversing that information into a time zone.\n\nIt's better to be \"Jimmy Robinson in Houston Texas\" than \"John Smith in UTC-0\"","removed":false,"published":"2024-08-31T15:24:27.851202Z","updated":"2024-08-31T15:27:02.201109Z","deleted":false,"ap_id":"https://social.packetloss.gg/comment/2252601","local":false,"path":"0.7497663","distinguished":false,"language_id":37},"creator":{"id":858165,"name":"Dark_Arc","display_name":"Dark Arc","avatar":"https://social.packetloss.gg/pictrs/image/37d4c04b-5a9a-4a2e-a449-7a0a4aacf182.png","banned":false,"published":"2023-08-10T02:06:46.473875Z","actor_id":"https://social.packetloss.gg/u/Dark_Arc","bio":"Hiker, software engineer (primarily C++, Java, and Python), Minecraft modder, hunter (of the Hunt Showdown variety), biker, adoptive Akronite, and general doer of assorted things.","local":false,"deleted":false,"matrix_user_id":"@dark_arc:matrix.org","bot_account":false,"instance_id":2041},"post":{"id":2426056,"name":"PSA: Git exposes timezone metadata","body":"Git records the local timezone when a commit is made [1]. Knowledge of the timezone in which a commit was made could be used as a bit of identifying information to de-anonymize the committer.\n\nSetting one's timezone to UTC can help mitigate this issue [2][3] (though, ofc, one must still be wary of time-of-day commit patterns being used to deduce a timezone).\n\n::: spoiler References\n1. Git documentation. git-commit. \"Date Formats: Git internal format\". Accessed: 2024-08-31T07:52Z. https://git-scm.com/docs/git-commit#Documentation/git-commit.txt-Gitinternalformat.\n > It is `

`, where `` is the number of seconds since the UNIX epoch. `` is a positive or negative offset from UTC. For example CET (which is 1 hour ahead of UTC) is `+0100`.\n2. jthill. \"How can I ignore committing timezone information in my commit?\". Stack Overflow. Published: 2014-05-26T16:57:37Z. (Accessed: 2024-08-31T08:27Z). https://stackoverflow.com/questions/23874208/how-can-i-ignore-committing-timezone-information-in-my-commit#comment36750060_23874208.\n > to set the timezone for a specific command, say e.g. `TZ=UTC git commit`\n3. Oliver. \"How can I ignore committing timezone information in my commit?\". Stack Overflow. Published: 2022-05-22T08:56:38Z (Accessed: 2024-08-31T08:30Z). https://stackoverflow.com/a/72336094/7934600\n > each commit Git stores a author date and a commit date. So you have to omit the timezone for both dates.\n > \n > I solved this for my self with the help of the following Git alias:\n > \n > ```\n > [alias]\n > co = \"!f() { \\\n > export GIT_AUTHOR_DATE=\\\"$(date -u +%Y-%m-%dT%H:%M:%S%z)\\\"; \\\n > export GIT_COMMITTER_DATE=\\\"$(date -u +%Y-%m-%dT%H:%M:%S%z)\\\"; \\\n > git commit $@; \\\n > git log -n 1 --pretty=\\\"Autor: %an <%ae> (%ai)\\\"; \\\n > git log -n 1 --pretty=\\\"Committer: %cn <%ce> (%ci)\\\"; \\\n > }; f\"\n:::\n\n---\n\nCross-posts:\n- https://sh.itjust.works/post/24495744\n- https://sh.itjust.works/post/24495795","creator_id":2931123,"community_id":182,"removed":false,"locked":false,"published":"2024-08-31T08:37:03.211985Z","updated":"2024-08-31T18:46:27.712734Z","deleted":false,"nsfw":false,"ap_id":"https://sh.itjust.works/post/24495692","local":false,"language_id":37,"featured_community":false,"featured_local":false},"community":{"id":182,"name":"privacy","title":"Privacy","description":"# A place to discuss privacy and freedom in the digital world.\n\nPrivacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy. \n\nIn this community everyone is welcome to post links and discuss topics related to privacy.\n\n### Some Rules\n\n - Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post\n - Don't promote proprietary software\n - Try to keep things on topic\n - If you have a question, please try searching for previous discussions, maybe it has already been answered\n - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n - Be nice :)\n\n### Related communities\n\n- [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n- [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n- [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n- [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n\nmuch thanks to @gary_host_laptop for the logo design :)","removed":false,"published":"2019-11-15T23:50:53.712299Z","updated":"2024-11-22T21:30:19.947538Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/privacy","local":false,"icon":"https://lemmy.ml/pictrs/image/h1ChnLuBHr.png","banner":"https://lemmy.ml/pictrs/image/DBjcqOW9ds.png","hidden":false,"posting_restricted_to_mods":false,"instance_id":2,"visibility":"Public"},"counts":{"comment_id":7497663,"score":14,"upvotes":15,"downvotes":1,"published":"2024-08-31T15:24:27.851202Z","child_count":3},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"subscribed":"NotSubscribed","saved":false,"creator_blocked":false},{"comment":{"id":7498906,"creator_id":55414,"post_id":2426056,"content":"> could be defeated by doing an analysis of when the commits were made on average vs other folks from random repositories to find the average time of day and then reversing that information into a time zone\n\nThis is the first thing I thought of upon reading the title, and I swear I've read a writeup of _something_ that included this as a lead that led to identifying an individual (i.e. commit timestamps)","removed":false,"published":"2024-08-31T17:25:46.179840Z","deleted":false,"ap_id":"https://sopuli.xyz/comment/11589194","local":false,"path":"0.7497663.7498906","distinguished":false,"language_id":0},"creator":{"id":55414,"name":"kamiheku","avatar":"https://sopuli.xyz/pictrs/image/3e55b0cf-b9d4-4790-bf89-4ecdcbb01c31.webp","banned":false,"published":"2023-06-10T14:57:49.033237Z","actor_id":"https://sopuli.xyz/u/kamiheku","local":false,"deleted":false,"bot_account":false,"instance_id":46},"post":{"id":2426056,"name":"PSA: Git exposes timezone metadata","body":"Git records the local timezone when a commit is made [1]. Knowledge of the timezone in which a commit was made could be used as a bit of identifying information to de-anonymize the committer.\n\nSetting one's timezone to UTC can help mitigate this issue [2][3] (though, ofc, one must still be wary of time-of-day commit patterns being used to deduce a timezone).\n\n::: spoiler References\n1. Git documentation. git-commit. \"Date Formats: Git internal format\". Accessed: 2024-08-31T07:52Z. https://git-scm.com/docs/git-commit#Documentation/git-commit.txt-Gitinternalformat.\n > It is `

`, where `` is the number of seconds since the UNIX epoch. `` is a positive or negative offset from UTC. For example CET (which is 1 hour ahead of UTC) is `+0100`.\n2. jthill. \"How can I ignore committing timezone information in my commit?\". Stack Overflow. Published: 2014-05-26T16:57:37Z. (Accessed: 2024-08-31T08:27Z). https://stackoverflow.com/questions/23874208/how-can-i-ignore-committing-timezone-information-in-my-commit#comment36750060_23874208.\n > to set the timezone for a specific command, say e.g. `TZ=UTC git commit`\n3. Oliver. \"How can I ignore committing timezone information in my commit?\". Stack Overflow. Published: 2022-05-22T08:56:38Z (Accessed: 2024-08-31T08:30Z). https://stackoverflow.com/a/72336094/7934600\n > each commit Git stores a author date and a commit date. So you have to omit the timezone for both dates.\n > \n > I solved this for my self with the help of the following Git alias:\n > \n > ```\n > [alias]\n > co = \"!f() { \\\n > export GIT_AUTHOR_DATE=\\\"$(date -u +%Y-%m-%dT%H:%M:%S%z)\\\"; \\\n > export GIT_COMMITTER_DATE=\\\"$(date -u +%Y-%m-%dT%H:%M:%S%z)\\\"; \\\n > git commit $@; \\\n > git log -n 1 --pretty=\\\"Autor: %an <%ae> (%ai)\\\"; \\\n > git log -n 1 --pretty=\\\"Committer: %cn <%ce> (%ci)\\\"; \\\n > }; f\"\n:::\n\n---\n\nCross-posts:\n- https://sh.itjust.works/post/24495744\n- https://sh.itjust.works/post/24495795","creator_id":2931123,"community_id":182,"removed":false,"locked":false,"published":"2024-08-31T08:37:03.211985Z","updated":"2024-08-31T18:46:27.712734Z","deleted":false,"nsfw":false,"ap_id":"https://sh.itjust.works/post/24495692","local":false,"language_id":37,"featured_community":false,"featured_local":false},"community":{"id":182,"name":"privacy","title":"Privacy","description":"# A place to discuss privacy and freedom in the digital world.\n\nPrivacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy. \n\nIn this community everyone is welcome to post links and discuss topics related to privacy.\n\n### Some Rules\n\n - Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post\n - Don't promote proprietary software\n - Try to keep things on topic\n - If you have a question, please try searching for previous discussions, maybe it has already been answered\n - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n - Be nice :)\n\n### Related communities\n\n- [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n- [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n- [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n- [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n\nmuch thanks to @gary_host_laptop for the logo design :)","removed":false,"published":"2019-11-15T23:50:53.712299Z","updated":"2024-11-22T21:30:19.947538Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/privacy","local":false,"icon":"https://lemmy.ml/pictrs/image/h1ChnLuBHr.png","banner":"https://lemmy.ml/pictrs/image/DBjcqOW9ds.png","hidden":false,"posting_restricted_to_mods":false,"instance_id":2,"visibility":"Public"},"counts":{"comment_id":7498906,"score":3,"upvotes":3,"downvotes":0,"published":"2024-08-31T17:25:46.179840Z","child_count":1},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"subscribed":"NotSubscribed","saved":false,"creator_blocked":false},{"comment":{"id":7502289,"creator_id":2931123,"post_id":2426056,"content":"> Any given time zone there are going to be millions if not billions of people.\n\nOne more bit of identifying information is still one more bit of identifying information.\n\n---\n\n> Git also “leaks” your system username and hostname IIRC by default which might be your real name.\n\nThis is only part of a fallback if a username and email is not provided [1].\n\n::: spoiler References\n1. Git. Reference Manual. git-commit. \"COMMIT INFORMATION\". Accessed: 2024-08-31T23:30Z. https://git-scm.com/docs/git-commit#_commit_information.\n > In case (some of) these environment variables are not set, the information is taken from the configuration items `user.name` and `user.email`, or, if not present, the environment variable EMAIL, or, if that is not set, system user name and the hostname used for outgoing mail (taken from `/etc/mailname` and falling back to the fully qualified hostname when that file does not exist).\n::: \n\n---\n\n> A fake name and email would pretty much be sufficient to make any “leaked” time zone information irrelevant.\n\nPerhaps only within the context where one is fine with being completely unidentifiable. But this doesn't consider the circumstance where a user *does* want their username to be known, but simply don't want it to be personally identifiable.\n\n---\n\n> UTC seems like it’s just “HEY LOOK AT ME! I’M TRYING TO HIDE SOMETHING!”\n\nThis is a fair argument. Ideally, imo, recording dates for commits would be an optional QoL setting rather than a mandatory one. Better yet, if Git simply recorded UTC by default, this would be much less of an issue overall.\n\n---\n\n> if you sleep like most people, could be defeated by doing an analysis of when the commits were made on average vs other folks from random repositories to find the average time of day and then reversing that information into a time zone.\n\nI mentioned this in my post.\n\n---\n\n> It’s better to be “Jimmy Robinson in Houston Texas” than “John Smith in UTC-0”\n\nThat decision is contextually dependent.","removed":false,"published":"2024-08-31T23:36:00.354578Z","deleted":false,"ap_id":"https://sh.itjust.works/comment/13647115","local":false,"path":"0.7497663.7502289","distinguished":false,"language_id":37},"creator":{"id":2931123,"name":"Kalcifer","display_name":"Kalcifer","avatar":"https://sh.itjust.works/pictrs/image/75f90336-f369-44a4-9aa4-d8154702c0a0.png","banned":false,"published":"2023-10-20T05:56:35.603510Z","actor_id":"https://sh.itjust.works/u/Kalcifer","bio":"All of this user's content is licensed under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/).","local":false,"deleted":false,"bot_account":false,"instance_id":24},"post":{"id":2426056,"name":"PSA: Git exposes timezone metadata","body":"Git records the local timezone when a commit is made [1]. Knowledge of the timezone in which a commit was made could be used as a bit of identifying information to de-anonymize the committer.\n\nSetting one's timezone to UTC can help mitigate this issue [2][3] (though, ofc, one must still be wary of time-of-day commit patterns being used to deduce a timezone).\n\n::: spoiler References\n1. Git documentation. git-commit. \"Date Formats: Git internal format\". Accessed: 2024-08-31T07:52Z. https://git-scm.com/docs/git-commit#Documentation/git-commit.txt-Gitinternalformat.\n > It is `

`, where `` is the number of seconds since the UNIX epoch. `` is a positive or negative offset from UTC. For example CET (which is 1 hour ahead of UTC) is `+0100`.\n2. jthill. \"How can I ignore committing timezone information in my commit?\". Stack Overflow. Published: 2014-05-26T16:57:37Z. (Accessed: 2024-08-31T08:27Z). https://stackoverflow.com/questions/23874208/how-can-i-ignore-committing-timezone-information-in-my-commit#comment36750060_23874208.\n > to set the timezone for a specific command, say e.g. `TZ=UTC git commit`\n3. Oliver. \"How can I ignore committing timezone information in my commit?\". Stack Overflow. Published: 2022-05-22T08:56:38Z (Accessed: 2024-08-31T08:30Z). https://stackoverflow.com/a/72336094/7934600\n > each commit Git stores a author date and a commit date. So you have to omit the timezone for both dates.\n > \n > I solved this for my self with the help of the following Git alias:\n > \n > ```\n > [alias]\n > co = \"!f() { \\\n > export GIT_AUTHOR_DATE=\\\"$(date -u +%Y-%m-%dT%H:%M:%S%z)\\\"; \\\n > export GIT_COMMITTER_DATE=\\\"$(date -u +%Y-%m-%dT%H:%M:%S%z)\\\"; \\\n > git commit $@; \\\n > git log -n 1 --pretty=\\\"Autor: %an <%ae> (%ai)\\\"; \\\n > git log -n 1 --pretty=\\\"Committer: %cn <%ce> (%ci)\\\"; \\\n > }; f\"\n:::\n\n---\n\nCross-posts:\n- https://sh.itjust.works/post/24495744\n- https://sh.itjust.works/post/24495795","creator_id":2931123,"community_id":182,"removed":false,"locked":false,"published":"2024-08-31T08:37:03.211985Z","updated":"2024-08-31T18:46:27.712734Z","deleted":false,"nsfw":false,"ap_id":"https://sh.itjust.works/post/24495692","local":false,"language_id":37,"featured_community":false,"featured_local":false},"community":{"id":182,"name":"privacy","title":"Privacy","description":"# A place to discuss privacy and freedom in the digital world.\n\nPrivacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy. \n\nIn this community everyone is welcome to post links and discuss topics related to privacy.\n\n### Some Rules\n\n - Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post\n - Don't promote proprietary software\n - Try to keep things on topic\n - If you have a question, please try searching for previous discussions, maybe it has already been answered\n - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n - Be nice :)\n\n### Related communities\n\n- [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n- [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n- [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n- [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n\nmuch thanks to @gary_host_laptop for the logo design :)","removed":false,"published":"2019-11-15T23:50:53.712299Z","updated":"2024-11-22T21:30:19.947538Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/privacy","local":false,"icon":"https://lemmy.ml/pictrs/image/h1ChnLuBHr.png","banner":"https://lemmy.ml/pictrs/image/DBjcqOW9ds.png","hidden":false,"posting_restricted_to_mods":false,"instance_id":2,"visibility":"Public"},"counts":{"comment_id":7502289,"score":0,"upvotes":1,"downvotes":1,"published":"2024-08-31T23:36:00.354578Z","child_count":0},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"subscribed":"NotSubscribed","saved":false,"creator_blocked":false},{"comment":{"id":7502295,"creator_id":2931123,"post_id":2426056,"content":">> could be defeated by doing an analysis of when the commits were made on average vs other folks from random repositories to find the average time of day and then reversing that information into a time zone\n> \n> This is the first thing I thought of upon reading the title\n\nIt's also in the post body.","removed":false,"published":"2024-08-31T23:36:50.175368Z","deleted":false,"ap_id":"https://sh.itjust.works/comment/13647128","local":false,"path":"0.7497663.7498906.7502295","distinguished":false,"language_id":37},"creator":{"id":2931123,"name":"Kalcifer","display_name":"Kalcifer","avatar":"https://sh.itjust.works/pictrs/image/75f90336-f369-44a4-9aa4-d8154702c0a0.png","banned":false,"published":"2023-10-20T05:56:35.603510Z","actor_id":"https://sh.itjust.works/u/Kalcifer","bio":"All of this user's content is licensed under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/).","local":false,"deleted":false,"bot_account":false,"instance_id":24},"post":{"id":2426056,"name":"PSA: Git exposes timezone metadata","body":"Git records the local timezone when a commit is made [1]. Knowledge of the timezone in which a commit was made could be used as a bit of identifying information to de-anonymize the committer.\n\nSetting one's timezone to UTC can help mitigate this issue [2][3] (though, ofc, one must still be wary of time-of-day commit patterns being used to deduce a timezone).\n\n::: spoiler References\n1. Git documentation. git-commit. \"Date Formats: Git internal format\". Accessed: 2024-08-31T07:52Z. https://git-scm.com/docs/git-commit#Documentation/git-commit.txt-Gitinternalformat.\n > It is `