GitHub Notification Emails Hijacked to Send Malware

Re:GitHub Notification Emails Hijacked to Send Malware by micw on Friday September 20, 2024 @12:41AM (#41598856)

Another red flag. I cannot take any project serious that has this on its documentation.

[ Parent | on HN ]

Re:GitHub Notification Emails Hijacked to Send Malware by kadoban on Friday September 20, 2024 @01:10AM (#41598979)

You prefer that they wrap it in an .msi file and put it on that same website? What do you think the advantages of that are?

[ Parent | on HN ]

Re:GitHub Notification Emails Hijacked to Send Malware by umanwizard on Friday September 20, 2024 @01:39AM (#41599100)

I guess you don’t think the Rust programming language is a serious project, then?

[ Parent | on HN ]

Re:GitHub Notification Emails Hijacked to Send Malware by guappa on Friday September 20, 2024 @04:58AM (#41600099)

I mean they even named the website cargo, after cargo culting! (jk)

[ Parent | on HN ]

Re:GitHub Notification Emails Hijacked to Send Malware by d0mine on Friday September 20, 2024 @01:12AM (#41598985)

what is the more secure way in you opinion? What is the weak link here? TLS transport? possibly compromised hosting/codebase? trust in app authors? not reading the shell script? checking a signature of some file?

[ Parent | on HN ]

Re:GitHub Notification Emails Hijacked to Send Malware by micw on Friday September 20, 2024 @03:35PM (#41604923)

My issue is the bypassing of the systems package manager. Doing so will result on files spread somewhere over the system. How do you uninstall such thing properly? How do you update (or even know) it's dependencies? Will it break because I uninstall or update one of it's dependencies?

Linux has a very good package management for many years. I see absolute no reason to break this by creating shell installers.

[ Parent | on HN ]