Backdooring Rust crates for fun and profit

Re:Backdooring Rust crates for fun and profit by dmurray on Thursday November 18, 2021 @12:03PM (#29267711)

Github generally has two levels (organization and repository) which works pretty well.

[ Parent | on HN ]

Re:Backdooring Rust crates for fun and profit by hollerith on Thursday November 18, 2021 @03:28PM (#29270070)

It works pretty well, but might not if making org2/repo55 a copy of org1/repo55 (i.e., forking) weren't free for the user (namely, org2) and maybe a venture-backed startup can afford to keep it free for the user, but a non-profit cannot.

[ Parent | on HN ]

Re:Backdooring Rust crates for fun and profit by xfer on Friday November 19, 2021 @12:09AM (#29274033)

Forking doesn't cost github anything it's a git branch of parent repo. That's why you could see people accessing youtube-dl via a commit hash of github dmca repo.

[ Parent | on HN ]