News for hackers. Stuff that matters.

A comment on Shai-Hulud compromised a dev machine and raided GitHub org access: a post-mortem. Parent comment

Re:Shai-Hulud compromised a dev machine and raided GitHub or... by woodruffw on Sunday December 14, 2025 @09:20PM (#46269666)
Serious question: what tools only support netrc for authentication? I'm aware of lots of tools that (unfortunately IMO) support netrc as a source of credentials, but I can't think of a single one that requires it.
[ Parent | on HN ]
Re:Shai-Hulud compromised a dev machine and raided GitHub or... by c0balt on Wednesday December 17, 2025 @02:58AM (#46299350)
Afaik, nix for https-based git(hub/lab/...) repositories and http-auth protected resources (via fetchurl and friends).
[ Parent | on HN ]