megamorf · HackerTrans

4 か月前議論

I'd love to hear more about this; have you considered creating a blog post, gist or something similar about it?

5 か月前議論

How is it different from https://github.github.io/gh-aw/?

8 か月前議論

Why is that horrific? To me it sounds like something desirable. Religion is a personal matter, as such it should not infringe on public spaces.

megamorf

11 か月前議論

The exfiltrated environment variables contained these entries:

``` "POSTGRESQL_DATABASE": "(CENSORED)", "POSTGRESQL_HOST": "(CENSORED)", "POSTGRESQL_PASSWORD": "(CENSORED)", "POSTGRESQL_USER": "(CENSORED)", ```

megamorf

11 か月前議論

The security researcher noticed that CodeRabbit runs linters against your code base and noticed that Rubocop was among the provided linters. Rubocop supports extensions that contain custom code, so he crafted an extension that exfiltrated the environment variables of the running Rubocop process when it linted the contents of his PR.

megamorf

11 か月前議論

Howon, you can stop posting that canned response. It's not helping the discussion in any way and matches the lack of detail the other commenters have pointed out.

コメント