Recent searches

No recent searches

Search options

Not available on social.wildeboer.net.
social.wildeboer.net is one of the many independent Mastodon servers you can use to participate in the fediverse.
Mastodon instance for people with Wildeboer as their last name

Administered by:

Server stats:

2
active users

social.wildeboer.net: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.4.4

#github

17 posts15 participants0 posts today
Kat Marchán 🐈<p>GitHub’s relevance as a development platform is rapidly devolving: I have gotten more spam on there and through there in the past couple of weeks than I will get in an entire year or two, and Copilot means they just don’t care.</p><p>Open Source deserves new homes. I’ll continue moving my projects away.</p><p><a href="https://toot.cat/tags/GitHub" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GitHub</span></a> <a href="https://toot.cat/tags/GiveUpGitHub" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GiveUpGitHub</span></a> <a href="https://toot.cat/tags/OpenSource" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OpenSource</span></a> <a href="https://toot.cat/tags/foss" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>foss</span></a></p>
Dmitry Tantsur<p><a href="https://mastodon.online/tags/Rustlang" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Rustlang</span></a> people, how would you react if a project you use or contribute to migrated from <a href="https://mastodon.online/tags/Github" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Github</span></a> to <a href="https://mastodon.online/tags/Codeberg" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Codeberg</span></a>?</p><p>Boosts welcome, let's collect some opinions.</p>
Neil Craig<p>It would be a pretty nice feature if you could set days/times to disallow merges in Github.</p><p>Merge to `main` in our repos deploys to prod via CI/CD.</p><p>I'd definitely configure our repos not to allow merges after 4PM and not on Friday/Saturday/Sunday. Obv would be trickier for geographically diverse teams but for us, that'd be super useful.</p><p><a href="https://mastodon.social/tags/GitHub" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GitHub</span></a> <a href="https://mastodon.social/tags/WebDev" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>WebDev</span></a> <a href="https://mastodon.social/tags/CICD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CICD</span></a></p>
jj@::1$:~<p>Imposible adivinar cuándo me fui de vacaciones no <a href="https://hachyderm.io/tags/github" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>github</span></a></p>
daniel:// stenberg://<p><a href="https://mastodon.social/tags/GitHub" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GitHub</span></a> tip: go to your profile =&gt; settings =&gt; passwords and authentication and in there, make sure to disable SMS for 2FA as it might otherwise have remained enabled.</p>
lars<p>Yeah!! Das <a href="https://fedihub.space/tags/Wetterradar" rel="nofollow noopener" target="_blank">#Wetterradar</a> läuft :-) Habs direkt in mein <a href="https://fedihub.space/tags/Github" rel="nofollow noopener" target="_blank">#Github</a><span> Repository gepackt. <br><br>Nichts grosses aber </span><a href="https://fedihub.space/tags/Selfhosting" rel="nofollow noopener" target="_blank">#Selfhosting</a><span> macht Spass.<br><br></span><a href="https://github.com/Happyfeet01/wetterradar/tree/main" rel="nofollow noopener" target="_blank">https://github.com/Happyfeet01/wetterradar/tree/main</a></p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://masto.hackers.town/@antijingoist" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>antijingoist</span></a></span> <span class="h-card" translate="no"><a href="https://infosec.exchange/@resingm" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>resingm</span></a></span> ???</p><p>Either way, I had cases of vandalism and harrassment and <a href="https://infosec.space/tags/Github" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Github</span></a> nit only dwalt wih them quickly but has working tools to ban offending accounts quickly.</p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://masto.hackers.town/@antijingoist" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>antijingoist</span></a></span> <span class="h-card" translate="no"><a href="https://infosec.exchange/@resingm" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>resingm</span></a></span> Just my personal experience on <a href="https://infosec.space/tags/GitHub" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GitHub</span></a>… </p><ul><li>The whole <a href="https://infosec.space/tags/Xlibre" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Xlibre</span></a> shitshow is based upon some asshole being yeeted for basically derailing the <a href="https://infosec.space/tags/FreeDesktop" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FreeDesktop</span></a> project.</li></ul>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://infosec.exchange/@resingm" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>resingm</span></a></span> <span class="h-card" translate="no"><a href="https://masto.hackers.town/@antijingoist" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>antijingoist</span></a></span> right now I still have my stuff on <a href="https://infosec.space/tags/Github" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Github</span></a> since I didn't had the time to migrate it away.</p><ul><li>Also they are practically <em>"DDoS-proof"</em> and actually have moderators that do their job.</li></ul>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://c.im/@spinglass" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>spinglass</span></a></span> <span class="h-card" translate="no"><a href="https://infosec.space/@OS1337" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>OS1337</span></a></span> certainly.</p><ul><li>I use <a href="https://infosec.space/tags/GitHub" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GitHub</span></a> mostly because it's <em>practically <a href="https://infosec.space/tags/DDoS" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DDoS</span></a>-proof</em> and their mods actually do their job well when it comes to harrassmrnt and vandalism.</li></ul>
Xavier «X» Santolaria :verified_paw: :donor:

🔥 Latest issue of my curated #cybersecurity and #infosec list of resources for week #37/2025 is out!

→ It includes the following and much more:

🗓️ Salesloft #GitHub Account Compromised Months Before #Salesforce Attack;

🎣 😱 20 Popular #npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack;

📺 Another breach at #Plex;

⚖️ 🇺🇸 Former #Meta security chief sues company;

💬 🔐 #Signal now offers secure chat backups;

🇨🇳 #Anthropic will stop selling its #AI services to companies with majority Chinese ownership;

🇬🇧 Jaguar Land Rover Admits #DataBreach Caused by Recent Cyberattack;

🇺🇸 👀 Senator Ron Wyden asked the FTC to investigate #Microsoft for gross cybersecurity negligence;

🇨🇳 🇺🇸 A House committee warns China-linked hackers (APT41) are targeting U.S. trade officials;

🇺🇸 🇲🇲 🇰🇭 The U.S. Treasury sanctioned 19 people and groups tied to big online #scam hubs in Burma and Cambodia;

👉 NEVER MISS my curations and updates on information security and cybersecurity news and challenges 📨 Subscribe to the #infosecMASHUP newsletter to have it piping hot in your inbox every week-end ⬇️

infosec-mashup.santolaria.net/

X’s InfoSec Newsletter🕵🏻‍♂️ [InfoSec MASHUP] 37/2025Salesloft GitHub Account Compromised Months Before Salesforce Attack; 20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack; Another breach at Plex; Signal now offers secure chat backups; Jaguar Land Rover Admits Data Breach Caused by Recent Cyberattack; Senator Ron Wyden asked the FTC to investigate Microsoft for gross cybersecurity negligence;
*
Veronica Olsen 🏳️‍🌈🇳🇴🌻

There is an on-going malware attack targeting users of GitHub Desktop by buying ads on search engines that link to a committed Readme files on the GitHub Desktop repo with links to malicious versions of the app. This attack is on-going. I just found another attempt from a few days ago.

I found an ad of the same kind on Duck Duck Go, so it's not just Google.

The details of the attack are described in the article.

arcticwolf.com/resources/blog/

Arctic Wolf · GPUGate Malware: Malicious GitHub Desktop Implants Use Hardware-Specific Decryption, Abuse Google Ads to Target Western Europe - Arctic WolfArctic Wolf has uncovered a sophisticated delivery chain: a threat actor abused GitHub’s repository structure and Google Ads to redirect users to a malicious download, while a GPU-gated decryption routine keeps the payload encrypted on systems without a GPU. We have named this new attack technique “GPUGate”.
#Security#GitHub#Malware
Replied to spinglass
*
Kevin Karhan :verified:

@spinglass nodds in agreement

Whilst I use #GitHub for @OS1337, I don't use #GithubActions and it can be all done completely airgapped (merely depending on your ability to get sources & toolchain on your device and follow documentation.

But then again I'm not deploying some 3rd tier esolang.

Sylvia

#Catima 2.38.0 is out!

github.com/CatimaLoyalty/Andro

This release adds support for .pkpasses, removes the Stocard importer (as Stocard no longer exists) and removes images from the widget below Android 12L.

Do note that the widget change is not what we want. If anyone understands this crash and has a fix, I'd love to hear it, so we can support images on all Android versions: github.com/CatimaLoyalty/Andro

Coming soon to an app store near you.

GitHubRelease 2.38.0 · CatimaLoyalty/AndroidAdd support for .pkpasses files Remove Stocard importer (Stocard no longer exists) Temporarily disable widget images below Android 12L (workaround for a crash issue)
#IzzyOnDroid#GitHub#GooglePlay
TrendingLive feeds
About