News for hackers. Stuff that matters.

A comment on We Executed a Critical Supply Chain Attack on PyTorch. Parent comment

Re:We Executed a Critical Supply Chain Attack on PyTorch by KptMarchewa on Sunday January 14, 2024 @04:50PM (#38994774)
GH actions are free on public repos.
[ Parent | on HN ]
Re:We Executed a Critical Supply Chain Attack on PyTorch by Groxx on Sunday January 14, 2024 @10:52PM (#38997287)
Until someone tries to mine Bitcoin in yours, yeah
[ Parent | on HN ]
Re:We Executed a Critical Supply Chain Attack on PyTorch by trevyn on Monday January 15, 2024 @04:24AM (#38998856)
Do you have a case study?

My prior is that GitHub is pretty competent in understanding malicious PRs to open source repos, and wouldn’t penalize the repo owner without other evidence of wrongdoing.

[ Parent | on HN ]