Add an option to open GitHub profiles from code pics about vsinder

[Bryce-MW]

I do like this idea but I agree on the privacy thing. Perhaps an option in your profile to allow anyone to click it, or only matches.

[gernei09]

Wanted to note, from VS code itself, it's relatively trivial to drag-drop the image onto your desktop or directly into the browser, which then exposes the URL of the avatar pic which contains the users GitHub NUMERIC id. Using that ID you can then query this API endpoint: "https://api.github.com/user/:id". The JSON results will then reveal the rest of the information that you need to know to find their GitHub home page. Here's mine for example: "https://api.github.com/user/15203217". So if the idea is to prevent this, then these profile pictures need to be copied into a CDN or other file storage mechanism. Or maybe some sort of URL proxy re-write mechanism? Either way, if either ID is known (either through packet sniffing or other means) then the home page can be discovered. I'd imagine that GitHub has some privacy settings on whether your profile is accessible publicly, but unconfirmed since I didn't dig that far. I think it would be a good idea to give the user the option whether to expose their GitHub profile home page, and maybe also their social media endpoints.

Note: The only reason I discovered the numeric ID from the image is because I wanted to be able to see a bigger profile picture. So with drag-dropping into the browser, I can then zoom! Hint Hint Give us a "view profile pic" option!

[benawad]

This is not in there on purpose to protect privacy, but I could see having this as an option if someone wanted to share

[benawad]

That's a good point

[unDeadHerbs]

Notably, on the other side of this, because people are bad at making up names and their GitHub profile picture is visible. It's currently not very hard to find their page. This might be bad but unfixable. (It's probably also possible to watch the app make the profile's image request and get it from there.)