News for hackers. Stuff that matters.

A comment on GitHub: Widespread Injection Vulnerabilities in Actions. Parent comment

Re:GitHub: Widespread Injection Vulnerabilities in Actions by Pfhreak on Tuesday November 03, 2020 @11:28AM (#24981081)
I'm not sure. I do know that you could, for instance, have your gold sent to a scammer with little to no recourse. It may be possible that this bug still exists because it's one of those "bugs that is also a feature".
[ Parent | on HN ]
Re:GitHub: Widespread Injection Vulnerabilities in Actions by lilyball on Tuesday November 03, 2020 @03:10PM (#24983450)
Blizzard's response was to modify /run to pop up a dialog first warning you that /run is used by scammers and requires you to confirm that you know what you're doing.
[ Parent | on HN ]