PSA: Github currently has spambot/ malware links problem.
from True@lemy.lol to cybersecurity@sh.itjust.works on 28 Aug 2024 11:41
https://lemy.lol/post/30350269

Source.

#cybersecurity

threaded - newest

webhat@infosec.exchange on 28 Aug 2024 12:40 next collapse

@True source: https://mastodon.social/@bagder/113038399943924413

True@lemy.lol on 28 Aug 2024 12:53 collapse

I have that in my postšŸ˜…

Gladaed@feddit.org on 28 Aug 2024 13:24 collapse

Not copy paste able.

odium@programming.dev on 28 Aug 2024 15:03 collapse

I can copy it in jerboa

Telorand@reddthat.com on 28 Aug 2024 15:31 next collapse

I can copy in Boost.

Gladaed@feddit.org on 28 Aug 2024 15:35 collapse

Ohhh, itā€™s a link with a set text. Didnā€™t see that or it was edited in. So very tiny

Ghoelian@lemmy.dbzer0.com on 28 Aug 2024 13:14 next collapse

Ahh, was wondering what was up with those comments on an issue I made.

Pretty much immediately got 2 comments with shady mediafire links in them.

tyler@programming.dev on 28 Aug 2024 13:38 next collapse

I recently saw an entire org set up with individual repos that were clearly meant to be found in search results for stuff like ā€œcomparison toolā€ (I donā€™t remember my exact search). It would then lead to a repo that just had a license and readme. The readme would be a full readme that explained the software but linked elsewhere to get it. The link was clearly a malware or phishing attempt.

furikuri@programming.dev on 28 Aug 2024 20:26 collapse

Lmao. They couldnā€™t even copy code from a random MIT licensed project? Sometimes I think these scammers arenā€™t even trying

Peruvian_Skies@sh.itjust.works on 28 Aug 2024 18:35 collapse

How many people are smart enough to open an issue on GitHub but stupid enough to run code from a password-protected file in a random Mediafire link?

UnrepentantAlgebra@lemmy.world on 28 Aug 2024 20:48 collapse

GitHub is many things nowadays. Some people use it sort of like a blog where they can easily post long pages of text, sometimes itā€™s the first thing that shows up in the search results when you search for a computer/phone problem.

Iā€™m gonna sound old here but the younger generations are in general less computer literate than they were back in my day, and a lot of people have no qualms about downloading and running random exeā€™s from discord or mediafire.

sugar_in_your_tea@sh.itjust.works on 29 Aug 2024 05:08 next collapse

Yeah, in my office, nobody had heard of dvorak (my keyboard layout), and they think Iā€™m crazy for using vim. They donā€™t seem to understand how git actually works, and when I describe how compilers work, they think Iā€™m speaking a foreign language. And these are people with years of SW development experience and CS degrees, a couple of them have masters.

Iā€™m older than many of them, but Iā€™m not that old (millenial), yet Iā€™m positive I knew all of this stuff back when I was at their point, as did most of my coworkers. Not sure if itā€™s a ā€œkids these daysā€ thing, or if I was just in a hacker-minded group earlier in my career, but Iā€™m quite disappointed in the depth of technical knowledge SW devs have these days. Oh, and I hired most of them, and they were the better ones of the bunch I was presented with.

To be fair, weā€™re a Python + JavaScript shop, but I still expect devs to be curious about how things work under the hood.

Hupf@feddit.org on 29 Aug 2024 14:23 next collapse

So youā€™re the guy from the alt-text in xkcd.com/1597/

sugar_in_your_tea@sh.itjust.works on 29 Aug 2024 14:50 collapse

Yeah, I guess so. I even gave a training to our team a year or so back.

UnrepentantAlgebra@lemmy.world on 29 Aug 2024 16:43 collapse

Ok you might be a little crazy for using vim in 2024 :D but it depends on the context. Editing a quick config file from command line? Sure. Working on a big project? No way, give me an IDE with real navigation and auto complete functionality.

I think part of the reason is just that the barrier to entry for software development continues to drop with IDEs, dependency/package managers, etc. Itā€™s really easy to get a working knowledge of your tools without knowing how they really work under the hood, which is good and bad.

sugar_in_your_tea@sh.itjust.works on 29 Aug 2024 16:53 collapse

Vim can have ā€œreal navigation,ā€ I have a plugin installed that lets me jump to method/class/variable definitions, and it works really well. The interaction is certainly different (IMO better, I just hit ā€œgdā€ and Iā€™m there), but Iā€™m able to get the features my coworkers like from whatever IDE they have with a few minutes of installing a plugin and editing some configs.

Iā€™ve tried IDEs and editors, and honestly, Iā€™m much more productive with my vim setup. Most of my time is spent reading and navigating code, and thatā€™s really nice w/ Vim. To each their own, but everyone should master the tools they use, and I find myself having to help other devs with their own configs (e.g. the Python plugin by default in VSCode ignores most type errors, and we use optional types everywhere and theyā€™re wrong more often than notā€¦).

So yeah, Iā€™m pretty sad that many new devs these days donā€™t really understand their tools, and sometimes donā€™t even understand the platform theyā€™re using because their IDE handwaves it away. I suppose thatā€™s good for me as a senior engineer because I can provide value fixing the random issues the other devs canā€™t, but it does make me sad that maybe, just maybe, AI will have a chance at eliminating so many jobs because the average dev doesnā€™t dig much deeper than the average AI does. Iā€™m not too worried about my job, but I am worried that Iā€™m going to have to fire people because a machine is better at their job than themā€¦

JulesTheModest@sh.itjust.works on 29 Aug 2024 19:27 collapse

Yes, I think you are right. I think itā€™s an attention span issue.

Ashen44@lemmy.ca on 29 Aug 2024 20:31 collapse

The reaaon tech literacy has dropped so much is actually because weā€™ve gotten too good at UX. You donā€™t need to know nearly as much to do most things with computers now, so most people donā€™t bother learning about how to properly use a computer anymore. Setting up an email address or a router or a website has gotten significantly less complicated so the average person can do it without needing to learn any new skills. Hell, phones are so streamlined that most people probably donā€™t even realize their phone has a file browser.

exu@feditown.com on 30 Aug 2024 20:36 collapse

Iā€™d argue we havenā€™t gotten good with UX, weā€™ve gotten fancy with it. No way in hell many of the current popular stuff is good UX. But shiny sells

Edit: spelling because typing on phones is shit