News for hackers. Stuff that matters.

A comment on I found 1000 GitHub repos with malware. Can we get them deleted?. Parent comment

Re:I found 1000 GitHub repos with malware. Can we get them d... by TonyTrapp on Friday February 28, 2025 @10:33AM (#43206717)
If you are in control of the domain of your email address, enable SPF and DKIM for that domain, together with strict policies that mail servers should reject spoofed mails claiming to come from that domain. If your own mail server supports validating SPF and DKIM, you would no longer receive such forged mails, nor anyone else behind a mail server supporting SPF and DKIM.

If you aren't in control... just ignore it like any other spam mail.

[ Parent | on HN ]
Re:I found 1000 GitHub repos with malware. Can we get them d... by Avamander on Friday February 28, 2025 @03:21PM (#43209976)
The thing that enforces the existence of either SPF or DKIM is called DMARC, setting that to "reject" or "quarantine" is the most critical step for preventing forgeries like that.
[ Parent | on HN ]