‹ BackHN Continuity

Thread

GitHub has not removed malicious imitation software after 3 weeks

279 points · 119 comments · hermitcrab

  1. hermitcrab · · focus · HN ↗
    Author of the post here. Github finally took the offending page down approximately 10 minutes after the post appeared on the front page of HN. Total coincidence. I'm sure!

    Moral of the story. If you want even the most basic level of support from Github, you need to get on the front page of HN first.

    And it seems they are able to do things very quickly, when they want to. Bastards.

    1. monster_truck · · focus · HN ↗
      They're generally extremely quick about this if you ping ~anyone on the security team with the offending url and a link to the real repo. There is a long ongoing game of cat & mouse against malware in repackaged things like first party windows utilities to leverage the signed binaries.
      1. hermitcrab · · focus · HN ↗
        >if you ping ~anyone on the security team

        And how I am supposed to know who they are or how to reach them?

        1. [deleted] · · focus · HN ↗

          [deleted]

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.