News for hackers. Stuff that matters.

A comment on GitHub Notification Emails Hijacked to Send Malware. Parent comment

Re:GitHub Notification Emails Hijacked to Send Malware by thih9 on Friday September 20, 2024 @02:24AM (#41599340)
If this was within my first year of owning a GitHub account, I would absolutely fall for this.

It's not much different from setting up your ssh key - something that you have to do; and new users also go through this workflow by copy pasting commands that GitHub sends them.

[ Parent | on HN ]
Re:GitHub Notification Emails Hijacked to Send Malware by jampekka on Friday September 20, 2024 @07:25AM (#41600881)
A prime example how all the paranoid security hoops can easily make things more insecure in aggegate.

Since Microsoft embracing and extending it, GitHub has become one of the worst offenders.

[ Parent | on HN ]