News for hackers. Stuff that matters.

A comment on Remote code execution in Homebrew by compromising the official Cask repository. Parent comment

Re:Remote code execution in Homebrew by compromising the off... by dcow on Saturday April 24, 2021 @02:22PM (#26927133)
Thats what their GH action effectively _is_. They just used a poor choice of tool. They could write a program and host it on a web server and it still might screw up.
[ Parent | on HN ]

There are no comments on this comment yet.