←back to thread

Ghrc.io appears to be malicious

(bmitch.net)
407 points todsacerdoti | 6 comments | 24 Aug 25 23:27 UTC | HN request time: 0.694s | source | bottom
1. usr1106 ◴[25 Aug 25 04:04 UTC] No.45010088[source]▶
One reason why you should never think or say ghcr, but always github container register, even if that is longer. You should have enough time for not getting trapped.

Root cause a stupid FLA of course. For several months I thought it means Google whatever register.

replies(2): >>45010504 #>>45012583 #
2. _def ◴[25 Aug 25 05:26 UTC] No.45010504[source]▶
I couldn't find anything useful - what is a FLA?
replies(3): >>45010589 #>>45010606 #>>45022278 #
3. buzer ◴[25 Aug 25 05:42 UTC] No.45010589[source]▶
Four Letter Acronym probably. https://slang.net/meaning/fla
4. cperciva ◴[25 Aug 25 05:46 UTC] No.45010606[source]▶
FLA is an unusual way of writing XTLA (Extended Three Letter Acronym).
5. TobTobXX ◴[25 Aug 25 11:13 UTC] No.45012583[source]▶
One reason why you should never think or say [or write] FLA, but always Four Letter Acronym (probably?), even if that is longer.
6. usr1106 ◴[26 Aug 25 04:26 UTC] No.45022278[source]▶
Of course I made it up, I assumed TLA is known as three letter acronym. Now ghcr has four of them...