←back to thread

Ghrc.io appears to be malicious

(bmitch.net)
407 points todsacerdoti | 1 comments | 24 Aug 25 23:27 UTC | HN request time: 0.247s | source
Show context
arjvik ◴[24 Aug 25 23:40 UTC] No.45008810[source]▶
Took the article pointing out that the c and r were transposed for me to even notice there was a problem!
replies(2): >>45008822 #>>45008942 #
echelon ◴[25 Aug 25 00:01 UTC] No.45008942[source]▶
The problem here is GitHub's terrible domain name.

The container registry has a horrible name.

replies(1): >>45008979 #
Gigachad ◴[25 Aug 25 00:07 UTC] No.45008979[source]▶
Why does it seem companies hate subdomains so much? Why is this not just registary.github.com or something? It's like they are trying to get people to fall for phishing by creating so many random domains.
replies(6): >>45009027 #>>45009048 #>>45009149 #>>45009221 #>>45009237 #>>45011982 #
1. JdeBP ◴[25 Aug 25 00:22 UTC] No.45009048[source]▶
Interestingly, the GitHub doco says outright that it superseded docker.pkg.github.com. ; so it was a conscious choice to go with this domain naming scheme instead of that one.

* https://docs.github.com/en/packages/working-with-a-github-pa...