Hacker News new | ask | show | jobs
by xlayn 31 days ago
I want to rush to git clone, but as things are, the odds are extremely high that this kind of things that are too good to be real are honeypots and something there will compromise your machine or make your llm start working for someone else...
2 comments

Then, don't rush and take a few minutes to set up a virtual machine.
What about all the virtual machine zero days?
Buy a VM in the cloud?
But what about all the zero days in the payment processors ("buy")?
Not even that, libssh2 vul. that "scp"s malware from cloud to your machine...
You can just download the zip over HTTPS
What if it's leveraging a zero day in your zip or https library?
That would be super interesting to have such a large repo when zipped by GitHub then turn into a malicious file. It would be its own front page story.