GitHub Actions update: Helping maintainers combat bad actors

Re:GitHub Actions update: Helping maintainers combat bad actors by jstrieb on Thursday April 22, 2021 @10:52PM (#26910531)

One of my own projects sits in a related grey area: it automates running a reverse shell inside an Action for collaborating on programming and competitive hacking challenges/CTF problems.[0] It lets anyone log into a shared session from the terminal or the browser.

My project doesn't use anywhere near the resources of cryptomining, but I still sometimes feel guilty when I fire it up. I wonder how different it is from regular GitHub Actions usage patterns, and whether it is noticeable to those maintaining the infrastructure. My hope is that the load it incurs is comparatively insignificant, and that if noticed, it will be viewed as a good-faith attempt to use resources in a creative way.

0: https://github.com/jstrieb/ctf-collab

[ Parent | on HN ]

Re:GitHub Actions update: Helping maintainers combat bad actors by saddlerustle on Friday April 23, 2021 @12:53AM (#26911090)

The underlying cost of actions based on Azure compute pricing is about two cents per hour, it's really nothing to feel guilty about.

[ Parent | on HN ]

Re:GitHub Actions update: Helping maintainers combat bad actors by simcop2387 on Thursday April 22, 2021 @11:32PM (#26910707)

Might be a good candidate for some self hosted runners on some vms or a pi cluster? Then no need to feel guilty at all

[ Parent | on HN ]