advice in regards .git vulnerability

You're receiving this because I've reached out to you via Email, Twitter or LinkedIn to report a security issue with your website.

In the most simple terms:

After I detect the potential vulnerability, I check that data can be downloaded, I then notify the likely person(s) responsible and immediately DELETE all content from MY secure environment.

What you should do now:

What do I want? Nothing, what goes around comes around.

If you don't understand and would like to contact me, reply to the message or you can find out more about me and my day jobs at

If you would like to spread the word about this problem, you can install a Chrome browser plugin which will tell you when a site you visit has the .git directory available.

Thank you for your time, have a better/good week.

Best Regards, Carl