Hacker News new | ask | show | jobs
by tumdum_ 3324 days ago
Moreover there is no trivial way to verify that https://github.com/mjg59 is github accout of Matthew Garrett. So all one needs to do is to create account that looks good and most people assume that it's safe.

Obviously I'm not saying that this is the case here. But it might not be the best idea to run whichever github project someone links to under root.

1 comments

Yep, that's what I thought, too :-D

I tried to find some "Github" link in mjg59.dreamwidth.org pointing to github.com/mjg59, but I don't think there is any.

Definitely, you don't feel comfortable cloning and building a git repo to run it as root :P

> I tried to find some "Github" link in mjg59.dreamwidth.org pointing to github.com/mjg59, but I don't think there is any.

There is one here: https://mjg59.dreamwidth.org/38136.html