Dendarii
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
Zerush@lemmy.ml to Open Source@lemmy.ml · 1 year ago

Over 100,000 Infected Repos Found on GitHub

apiiro.com

external-link
message-square
26
fedilink
204
external-link

Over 100,000 Infected Repos Found on GitHub

apiiro.com

Zerush@lemmy.ml to Open Source@lemmy.ml · 1 year ago
message-square
26
fedilink
The Apiiro research team has detected a repo confusion campaign that has evolved and expanded, impacting over 100k GitHub repos with malicious code.
  • delirious_owl@discuss.online
    link
    fedilink
    arrow-up
    4
    arrow-down
    1
    ·
    1 year ago

    AppImages actually do have (optional) support for signatures.

    • Pantherina@feddit.de
      link
      fedilink
      arrow-up
      2
      ·
      1 year ago

      They have no update feature afaik, how does this work? What verified this signature, the user?

      • delirious_owl@discuss.online
        link
        fedilink
        arrow-up
        2
        ·
        1 year ago

        Its a subcommand of the AppImage. The developer adds the signature to the AppImage and the user verifies it after download with the subcommand.

        • Pantherina@feddit.de
          link
          fedilink
          arrow-up
          1
          ·
          1 year ago

          Thats nice, didnt even know there was an interface for managing appimages?

Open Source@lemmy.ml

opensource@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

  • Open Source Initiative
  • Free Software Foundation
  • Electronic Frontier Foundation
  • Software Freedom Conservancy
  • It’s FOSS
  • Android FOSS Apps Megathread

Rules

  • Posts must be relevant to the open source ideology
  • No NSFW content
  • No hate speech, bigotry, etc

Related Communities

  • [email protected]
  • [email protected]
  • [email protected]
  • [email protected]
  • [email protected]

Community icon from opensource.org, but we are not affiliated with them.

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 147 users / day
  • 1.21K users / week
  • 3.76K users / month
  • 10.5K users / 6 months
  • 1 local subscriber
  • 36.7K subscribers
  • 1.66K Posts
  • 25.6K Comments
  • Modlog
  • mods:
  • Evan@lemmy.ml
  • kevincox@lemmy.ml
  • CrypticCoffee@lemmy.ml
  • Lettuce eat lettuce@lemmy.ml
  • BE: 0.19.9
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org